./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-14 00:17:03,190 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-14 00:17:03,192 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-14 00:17:03,215 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-14 00:17:03,216 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-14 00:17:03,217 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-14 00:17:03,218 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-14 00:17:03,219 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-14 00:17:03,221 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-14 00:17:03,221 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-14 00:17:03,222 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-14 00:17:03,223 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-14 00:17:03,224 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-14 00:17:03,224 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-14 00:17:03,225 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-14 00:17:03,226 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-14 00:17:03,227 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-14 00:17:03,228 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-14 00:17:03,229 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-14 00:17:03,231 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-14 00:17:03,232 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-14 00:17:03,233 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-14 00:17:03,234 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-14 00:17:03,235 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-14 00:17:03,236 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-14 00:17:03,238 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-14 00:17:03,239 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-14 00:17:03,239 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-14 00:17:03,240 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-14 00:17:03,240 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-14 00:17:03,241 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-14 00:17:03,241 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-14 00:17:03,242 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-14 00:17:03,242 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-14 00:17:03,243 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-14 00:17:03,244 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-14 00:17:03,244 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-14 00:17:03,244 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-14 00:17:03,245 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-14 00:17:03,245 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-14 00:17:03,246 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-14 00:17:03,248 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-14 00:17:03,248 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-14 00:17:03,266 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-14 00:17:03,266 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-14 00:17:03,266 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-14 00:17:03,267 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-14 00:17:03,267 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-14 00:17:03,268 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-14 00:17:03,268 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-14 00:17:03,268 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-14 00:17:03,268 INFO L138 SettingsManager]: * Use SBE=true [2022-07-14 00:17:03,269 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-14 00:17:03,269 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-14 00:17:03,269 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-14 00:17:03,269 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-14 00:17:03,269 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-14 00:17:03,269 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-14 00:17:03,270 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-14 00:17:03,270 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-14 00:17:03,270 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-14 00:17:03,270 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-14 00:17:03,270 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-14 00:17:03,271 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-14 00:17:03,271 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-14 00:17:03,271 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-14 00:17:03,271 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-14 00:17:03,271 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-14 00:17:03,272 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-14 00:17:03,272 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-14 00:17:03,272 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-14 00:17:03,272 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-14 00:17:03,272 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-14 00:17:03,272 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b [2022-07-14 00:17:03,480 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-14 00:17:03,504 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-14 00:17:03,508 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-14 00:17:03,509 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-14 00:17:03,509 INFO L275 PluginConnector]: CDTParser initialized [2022-07-14 00:17:03,511 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-14 00:17:03,567 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bc3246c32/c121a7c89db944aca3e19f2b2721705a/FLAG4c147e4c7 [2022-07-14 00:17:04,282 INFO L306 CDTParser]: Found 1 translation units. [2022-07-14 00:17:04,282 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-14 00:17:04,321 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bc3246c32/c121a7c89db944aca3e19f2b2721705a/FLAG4c147e4c7 [2022-07-14 00:17:04,562 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bc3246c32/c121a7c89db944aca3e19f2b2721705a [2022-07-14 00:17:04,565 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-14 00:17:04,567 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-14 00:17:04,568 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-14 00:17:04,568 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-14 00:17:04,573 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-14 00:17:04,573 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 12:17:04" (1/1) ... [2022-07-14 00:17:04,574 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3a3205c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:04, skipping insertion in model container [2022-07-14 00:17:04,575 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 12:17:04" (1/1) ... [2022-07-14 00:17:04,580 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-14 00:17:04,661 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-14 00:17:05,294 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-14 00:17:05,436 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 00:17:05,471 INFO L203 MainTranslator]: Completed pre-run [2022-07-14 00:17:05,615 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-14 00:17:05,687 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 00:17:05,721 INFO L208 MainTranslator]: Completed translation [2022-07-14 00:17:05,722 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05 WrapperNode [2022-07-14 00:17:05,723 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-14 00:17:05,724 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-14 00:17:05,725 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-14 00:17:05,725 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-14 00:17:05,731 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,771 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,844 INFO L137 Inliner]: procedures = 101, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 961 [2022-07-14 00:17:05,845 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-14 00:17:05,846 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-14 00:17:05,846 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-14 00:17:05,846 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-14 00:17:05,854 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,854 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,874 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,876 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,916 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,924 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,935 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,944 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-14 00:17:05,945 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-14 00:17:05,945 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-14 00:17:05,945 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-14 00:17:05,946 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (1/1) ... [2022-07-14 00:17:05,956 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-14 00:17:05,975 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 00:17:05,985 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-14 00:17:05,987 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-14 00:17:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-07-14 00:17:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-07-14 00:17:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-07-14 00:17:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-14 00:17:06,013 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-14 00:17:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-14 00:17:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2022-07-14 00:17:06,014 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2022-07-14 00:17:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-07-14 00:17:06,014 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-07-14 00:17:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-14 00:17:06,015 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-14 00:17:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-07-14 00:17:06,015 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-07-14 00:17:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-07-14 00:17:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-14 00:17:06,015 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-14 00:17:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-07-14 00:17:06,016 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-07-14 00:17:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-14 00:17:06,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-14 00:17:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-14 00:17:06,016 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-14 00:17:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-14 00:17:06,017 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-14 00:17:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-14 00:17:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-14 00:17:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-14 00:17:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-14 00:17:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-14 00:17:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2022-07-14 00:17:06,018 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2022-07-14 00:17:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2022-07-14 00:17:06,018 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2022-07-14 00:17:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-14 00:17:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-14 00:17:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-07-14 00:17:06,019 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-07-14 00:17:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-14 00:17:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-07-14 00:17:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-14 00:17:06,019 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-14 00:17:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-14 00:17:06,020 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-14 00:17:06,279 INFO L234 CfgBuilder]: Building ICFG [2022-07-14 00:17:06,294 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-14 00:17:06,448 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-14 00:17:07,890 INFO L275 CfgBuilder]: Performing block encoding [2022-07-14 00:17:07,902 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-14 00:17:07,903 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-14 00:17:07,905 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 12:17:07 BoogieIcfgContainer [2022-07-14 00:17:07,905 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-14 00:17:07,908 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-14 00:17:07,908 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-14 00:17:07,911 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-14 00:17:07,911 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.07 12:17:04" (1/3) ... [2022-07-14 00:17:07,913 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b27630f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.07 12:17:07, skipping insertion in model container [2022-07-14 00:17:07,913 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:05" (2/3) ... [2022-07-14 00:17:07,913 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b27630f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.07 12:17:07, skipping insertion in model container [2022-07-14 00:17:07,914 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 12:17:07" (3/3) ... [2022-07-14 00:17:07,915 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-14 00:17:07,927 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-14 00:17:07,927 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-14 00:17:07,981 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-14 00:17:07,987 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@a80598e, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@16c840eb [2022-07-14 00:17:07,987 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-14 00:17:07,991 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) [2022-07-14 00:17:08,001 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-07-14 00:17:08,002 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:08,002 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:08,003 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:08,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:08,008 INFO L85 PathProgramCache]: Analyzing trace with hash 721078938, now seen corresponding path program 1 times [2022-07-14 00:17:08,016 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:08,016 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [720143307] [2022-07-14 00:17:08,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:08,017 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:08,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:08,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:08,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:08,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:08,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:08,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:08,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:08,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-14 00:17:08,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:08,512 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-14 00:17:08,513 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:08,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [720143307] [2022-07-14 00:17:08,514 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [720143307] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:08,514 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:17:08,514 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 00:17:08,516 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088224441] [2022-07-14 00:17:08,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:08,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-14 00:17:08,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:08,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 00:17:08,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 00:17:08,544 INFO L87 Difference]: Start difference. First operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-14 00:17:10,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:10,745 INFO L93 Difference]: Finished difference Result 786 states and 1178 transitions. [2022-07-14 00:17:10,746 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-14 00:17:10,747 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 42 [2022-07-14 00:17:10,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:10,762 INFO L225 Difference]: With dead ends: 786 [2022-07-14 00:17:10,762 INFO L226 Difference]: Without dead ends: 536 [2022-07-14 00:17:10,768 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-14 00:17:10,771 INFO L413 NwaCegarLoop]: 346 mSDtfsCounter, 580 mSDsluCounter, 626 mSDsCounter, 0 mSdLazyCounter, 374 mSolverCounterSat, 221 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 605 SdHoareTripleChecker+Valid, 972 SdHoareTripleChecker+Invalid, 595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 221 IncrementalHoareTripleChecker+Valid, 374 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:10,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [605 Valid, 972 Invalid, 595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [221 Valid, 374 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-07-14 00:17:10,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2022-07-14 00:17:10,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 419. [2022-07-14 00:17:10,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 419 states, 339 states have (on average 1.3746312684365782) internal successors, (466), 339 states have internal predecessors, (466), 56 states have call successors, (56), 24 states have call predecessors, (56), 23 states have return successors, (55), 55 states have call predecessors, (55), 55 states have call successors, (55) [2022-07-14 00:17:10,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 577 transitions. [2022-07-14 00:17:10,864 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 577 transitions. Word has length 42 [2022-07-14 00:17:10,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:10,865 INFO L495 AbstractCegarLoop]: Abstraction has 419 states and 577 transitions. [2022-07-14 00:17:10,865 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-14 00:17:10,866 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 577 transitions. [2022-07-14 00:17:10,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-14 00:17:10,871 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:10,871 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:10,871 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-14 00:17:10,872 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:10,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:10,872 INFO L85 PathProgramCache]: Analyzing trace with hash -36377006, now seen corresponding path program 1 times [2022-07-14 00:17:10,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:10,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [950585952] [2022-07-14 00:17:10,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:10,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:10,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:11,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:11,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:11,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:11,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:11,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:11,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:11,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-14 00:17:11,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:11,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-14 00:17:11,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:11,148 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-14 00:17:11,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:11,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [950585952] [2022-07-14 00:17:11,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [950585952] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:11,148 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:17:11,149 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 00:17:11,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310166445] [2022-07-14 00:17:11,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:11,150 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-14 00:17:11,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:11,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 00:17:11,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-14 00:17:11,151 INFO L87 Difference]: Start difference. First operand 419 states and 577 transitions. Second operand has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-14 00:17:13,050 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.15s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-14 00:17:14,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:14,328 INFO L93 Difference]: Finished difference Result 1453 states and 2078 transitions. [2022-07-14 00:17:14,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 00:17:14,329 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 52 [2022-07-14 00:17:14,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:14,337 INFO L225 Difference]: With dead ends: 1453 [2022-07-14 00:17:14,338 INFO L226 Difference]: Without dead ends: 1044 [2022-07-14 00:17:14,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-07-14 00:17:14,342 INFO L413 NwaCegarLoop]: 331 mSDtfsCounter, 606 mSDsluCounter, 1188 mSDsCounter, 0 mSdLazyCounter, 598 mSolverCounterSat, 196 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 634 SdHoareTripleChecker+Valid, 1519 SdHoareTripleChecker+Invalid, 794 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 196 IncrementalHoareTripleChecker+Valid, 598 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:14,343 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [634 Valid, 1519 Invalid, 794 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [196 Valid, 598 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-07-14 00:17:14,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1044 states. [2022-07-14 00:17:14,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1044 to 871. [2022-07-14 00:17:14,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 871 states, 706 states have (on average 1.3767705382436262) internal successors, (972), 710 states have internal predecessors, (972), 113 states have call successors, (113), 46 states have call predecessors, (113), 51 states have return successors, (131), 114 states have call predecessors, (131), 112 states have call successors, (131) [2022-07-14 00:17:14,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 871 states to 871 states and 1216 transitions. [2022-07-14 00:17:14,427 INFO L78 Accepts]: Start accepts. Automaton has 871 states and 1216 transitions. Word has length 52 [2022-07-14 00:17:14,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:14,427 INFO L495 AbstractCegarLoop]: Abstraction has 871 states and 1216 transitions. [2022-07-14 00:17:14,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-14 00:17:14,428 INFO L276 IsEmpty]: Start isEmpty. Operand 871 states and 1216 transitions. [2022-07-14 00:17:14,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2022-07-14 00:17:14,439 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:14,439 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:14,439 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-14 00:17:14,440 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:14,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:14,440 INFO L85 PathProgramCache]: Analyzing trace with hash 1655869192, now seen corresponding path program 1 times [2022-07-14 00:17:14,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:14,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1332684718] [2022-07-14 00:17:14,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:14,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:14,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:14,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:14,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:14,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-14 00:17:14,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-14 00:17:14,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:14,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:14,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-14 00:17:14,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:14,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-14 00:17:14,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:14,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-14 00:17:14,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:14,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-07-14 00:17:14,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:14,891 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 8 proven. 2 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-07-14 00:17:14,892 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:14,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1332684718] [2022-07-14 00:17:14,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1332684718] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-14 00:17:14,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1085566333] [2022-07-14 00:17:14,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:14,893 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-14 00:17:14,893 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 00:17:14,899 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-14 00:17:14,907 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-14 00:17:15,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,254 INFO L263 TraceCheckSpWp]: Trace formula consists of 1311 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-14 00:17:15,263 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:17:15,308 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-07-14 00:17:15,309 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:17:15,309 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1085566333] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:15,310 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-14 00:17:15,310 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 11 [2022-07-14 00:17:15,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [728742625] [2022-07-14 00:17:15,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:15,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-14 00:17:15,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:15,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 00:17:15,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-07-14 00:17:15,312 INFO L87 Difference]: Start difference. First operand 871 states and 1216 transitions. Second operand has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-14 00:17:15,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:15,395 INFO L93 Difference]: Finished difference Result 2006 states and 2833 transitions. [2022-07-14 00:17:15,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 00:17:15,396 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 126 [2022-07-14 00:17:15,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:15,402 INFO L225 Difference]: With dead ends: 2006 [2022-07-14 00:17:15,402 INFO L226 Difference]: Without dead ends: 1151 [2022-07-14 00:17:15,405 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 161 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-07-14 00:17:15,406 INFO L413 NwaCegarLoop]: 320 mSDtfsCounter, 125 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:15,407 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 591 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-14 00:17:15,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1151 states. [2022-07-14 00:17:15,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1151 to 1140. [2022-07-14 00:17:15,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1140 states, 952 states have (on average 1.4002100840336134) internal successors, (1333), 956 states have internal predecessors, (1333), 126 states have call successors, (126), 56 states have call predecessors, (126), 61 states have return successors, (144), 127 states have call predecessors, (144), 125 states have call successors, (144) [2022-07-14 00:17:15,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1140 states to 1140 states and 1603 transitions. [2022-07-14 00:17:15,489 INFO L78 Accepts]: Start accepts. Automaton has 1140 states and 1603 transitions. Word has length 126 [2022-07-14 00:17:15,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:15,490 INFO L495 AbstractCegarLoop]: Abstraction has 1140 states and 1603 transitions. [2022-07-14 00:17:15,490 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-14 00:17:15,490 INFO L276 IsEmpty]: Start isEmpty. Operand 1140 states and 1603 transitions. [2022-07-14 00:17:15,493 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2022-07-14 00:17:15,494 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:15,494 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:15,545 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-14 00:17:15,694 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-14 00:17:15,695 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:15,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:15,695 INFO L85 PathProgramCache]: Analyzing trace with hash -474001616, now seen corresponding path program 1 times [2022-07-14 00:17:15,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:15,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605394225] [2022-07-14 00:17:15,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:15,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:15,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:15,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:15,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:15,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-14 00:17:15,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-14 00:17:15,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-14 00:17:15,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-14 00:17:15,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-14 00:17:15,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:15,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:15,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-14 00:17:15,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:15,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-14 00:17:15,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:15,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-14 00:17:15,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:15,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:15,995 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2022-07-14 00:17:15,995 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:15,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605394225] [2022-07-14 00:17:15,996 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605394225] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:15,996 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:17:15,996 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 00:17:15,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1199889568] [2022-07-14 00:17:15,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:15,997 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-14 00:17:15,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:15,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 00:17:15,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-14 00:17:15,998 INFO L87 Difference]: Start difference. First operand 1140 states and 1603 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-14 00:17:18,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:18,848 INFO L93 Difference]: Finished difference Result 3449 states and 4896 transitions. [2022-07-14 00:17:18,849 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 00:17:18,849 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 148 [2022-07-14 00:17:18,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:18,861 INFO L225 Difference]: With dead ends: 3449 [2022-07-14 00:17:18,862 INFO L226 Difference]: Without dead ends: 2336 [2022-07-14 00:17:18,866 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-14 00:17:18,867 INFO L413 NwaCegarLoop]: 444 mSDtfsCounter, 664 mSDsluCounter, 1058 mSDsCounter, 0 mSdLazyCounter, 549 mSolverCounterSat, 271 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 693 SdHoareTripleChecker+Valid, 1502 SdHoareTripleChecker+Invalid, 820 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 271 IncrementalHoareTripleChecker+Valid, 549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:18,868 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [693 Valid, 1502 Invalid, 820 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [271 Valid, 549 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-07-14 00:17:18,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2336 states. [2022-07-14 00:17:18,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2336 to 1902. [2022-07-14 00:17:18,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1902 states, 1588 states have (on average 1.3860201511335013) internal successors, (2201), 1596 states have internal predecessors, (2201), 206 states have call successors, (206), 96 states have call predecessors, (206), 107 states have return successors, (233), 209 states have call predecessors, (233), 205 states have call successors, (233) [2022-07-14 00:17:18,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1902 states to 1902 states and 2640 transitions. [2022-07-14 00:17:18,974 INFO L78 Accepts]: Start accepts. Automaton has 1902 states and 2640 transitions. Word has length 148 [2022-07-14 00:17:18,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:18,975 INFO L495 AbstractCegarLoop]: Abstraction has 1902 states and 2640 transitions. [2022-07-14 00:17:18,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-14 00:17:18,976 INFO L276 IsEmpty]: Start isEmpty. Operand 1902 states and 2640 transitions. [2022-07-14 00:17:18,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2022-07-14 00:17:18,980 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:18,981 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:18,981 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-14 00:17:18,981 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:18,982 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:18,982 INFO L85 PathProgramCache]: Analyzing trace with hash -676998162, now seen corresponding path program 1 times [2022-07-14 00:17:18,982 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:18,982 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [36484501] [2022-07-14 00:17:18,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:18,983 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:19,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:19,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:19,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:19,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-14 00:17:19,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-14 00:17:19,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-14 00:17:19,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-14 00:17:19,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-14 00:17:19,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:19,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:19,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-14 00:17:19,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:19,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-14 00:17:19,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:19,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-14 00:17:19,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:19,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:19,401 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2022-07-14 00:17:19,402 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:19,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [36484501] [2022-07-14 00:17:19,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [36484501] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:19,402 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:17:19,402 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-14 00:17:19,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [20586157] [2022-07-14 00:17:19,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:19,403 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-14 00:17:19,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:19,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-14 00:17:19,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-07-14 00:17:19,405 INFO L87 Difference]: Start difference. First operand 1902 states and 2640 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-14 00:17:22,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:22,611 INFO L93 Difference]: Finished difference Result 4158 states and 5877 transitions. [2022-07-14 00:17:22,612 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 00:17:22,612 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) Word has length 148 [2022-07-14 00:17:22,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:22,625 INFO L225 Difference]: With dead ends: 4158 [2022-07-14 00:17:22,625 INFO L226 Difference]: Without dead ends: 2283 [2022-07-14 00:17:22,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-14 00:17:22,635 INFO L413 NwaCegarLoop]: 305 mSDtfsCounter, 110 mSDsluCounter, 1384 mSDsCounter, 0 mSdLazyCounter, 729 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 1689 SdHoareTripleChecker+Invalid, 789 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 729 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:22,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 1689 Invalid, 789 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 729 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-07-14 00:17:22,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2283 states. [2022-07-14 00:17:22,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2283 to 1902. [2022-07-14 00:17:22,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1902 states, 1580 states have (on average 1.3778481012658228) internal successors, (2177), 1592 states have internal predecessors, (2177), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (249), 213 states have call predecessors, (249), 205 states have call successors, (249) [2022-07-14 00:17:22,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1902 states to 1902 states and 2632 transitions. [2022-07-14 00:17:22,723 INFO L78 Accepts]: Start accepts. Automaton has 1902 states and 2632 transitions. Word has length 148 [2022-07-14 00:17:22,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:22,726 INFO L495 AbstractCegarLoop]: Abstraction has 1902 states and 2632 transitions. [2022-07-14 00:17:22,726 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-14 00:17:22,726 INFO L276 IsEmpty]: Start isEmpty. Operand 1902 states and 2632 transitions. [2022-07-14 00:17:22,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 156 [2022-07-14 00:17:22,733 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:22,733 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:22,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-14 00:17:22,733 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:22,734 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:22,734 INFO L85 PathProgramCache]: Analyzing trace with hash -293871194, now seen corresponding path program 1 times [2022-07-14 00:17:22,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:22,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2074746391] [2022-07-14 00:17:22,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:22,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:22,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:22,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:22,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:22,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-14 00:17:22,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-14 00:17:22,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-14 00:17:22,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-14 00:17:22,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-14 00:17:22,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:22,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:22,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:23,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-14 00:17:23,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:23,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:23,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-14 00:17:23,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:23,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-07-14 00:17:23,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:23,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:23,214 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2022-07-14 00:17:23,214 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:23,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2074746391] [2022-07-14 00:17:23,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2074746391] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:23,214 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:17:23,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-07-14 00:17:23,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522325433] [2022-07-14 00:17:23,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:23,215 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-07-14 00:17:23,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:23,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-07-14 00:17:23,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2022-07-14 00:17:23,217 INFO L87 Difference]: Start difference. First operand 1902 states and 2632 transitions. Second operand has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) [2022-07-14 00:17:25,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:25,812 INFO L93 Difference]: Finished difference Result 4398 states and 6221 transitions. [2022-07-14 00:17:25,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-14 00:17:25,813 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) Word has length 155 [2022-07-14 00:17:25,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:25,856 INFO L225 Difference]: With dead ends: 4398 [2022-07-14 00:17:25,856 INFO L226 Difference]: Without dead ends: 2523 [2022-07-14 00:17:25,861 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=43, Invalid=229, Unknown=0, NotChecked=0, Total=272 [2022-07-14 00:17:25,865 INFO L413 NwaCegarLoop]: 353 mSDtfsCounter, 262 mSDsluCounter, 2525 mSDsCounter, 0 mSdLazyCounter, 1281 mSolverCounterSat, 139 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 281 SdHoareTripleChecker+Valid, 2878 SdHoareTripleChecker+Invalid, 1420 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 139 IncrementalHoareTripleChecker+Valid, 1281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:25,865 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [281 Valid, 2878 Invalid, 1420 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [139 Valid, 1281 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-07-14 00:17:25,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2523 states. [2022-07-14 00:17:25,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2523 to 1918. [2022-07-14 00:17:25,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1918 states, 1596 states have (on average 1.369047619047619) internal successors, (2185), 1600 states have internal predecessors, (2185), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2022-07-14 00:17:25,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1918 states to 1918 states and 2636 transitions. [2022-07-14 00:17:25,962 INFO L78 Accepts]: Start accepts. Automaton has 1918 states and 2636 transitions. Word has length 155 [2022-07-14 00:17:25,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:25,964 INFO L495 AbstractCegarLoop]: Abstraction has 1918 states and 2636 transitions. [2022-07-14 00:17:25,964 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) [2022-07-14 00:17:25,964 INFO L276 IsEmpty]: Start isEmpty. Operand 1918 states and 2636 transitions. [2022-07-14 00:17:25,968 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-07-14 00:17:25,968 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:25,969 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:25,969 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-14 00:17:25,969 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:25,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:25,970 INFO L85 PathProgramCache]: Analyzing trace with hash -1223252563, now seen corresponding path program 1 times [2022-07-14 00:17:25,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:25,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2099513537] [2022-07-14 00:17:25,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:25,970 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:26,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:26,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:26,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:26,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-14 00:17:26,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-14 00:17:26,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-14 00:17:26,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-14 00:17:26,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-14 00:17:26,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:26,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:26,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-14 00:17:26,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:26,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:26,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-14 00:17:26,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-14 00:17:26,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:26,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-14 00:17:26,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:26,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,355 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2022-07-14 00:17:26,355 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:26,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2099513537] [2022-07-14 00:17:26,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2099513537] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-14 00:17:26,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [97418288] [2022-07-14 00:17:26,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:26,356 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-14 00:17:26,356 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 00:17:26,360 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-14 00:17:26,364 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-14 00:17:26,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:26,766 INFO L263 TraceCheckSpWp]: Trace formula consists of 1501 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-14 00:17:26,778 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:17:26,837 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 79 trivial. 0 not checked. [2022-07-14 00:17:26,837 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:17:26,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [97418288] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:26,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-14 00:17:26,838 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 9 [2022-07-14 00:17:26,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [848365763] [2022-07-14 00:17:26,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:26,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-14 00:17:26,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:26,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 00:17:26,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-07-14 00:17:26,840 INFO L87 Difference]: Start difference. First operand 1918 states and 2636 transitions. Second operand has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-14 00:17:26,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:26,926 INFO L93 Difference]: Finished difference Result 3819 states and 5254 transitions. [2022-07-14 00:17:26,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 00:17:26,927 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2022-07-14 00:17:26,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:26,937 INFO L225 Difference]: With dead ends: 3819 [2022-07-14 00:17:26,937 INFO L226 Difference]: Without dead ends: 1919 [2022-07-14 00:17:26,942 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 191 SyntacticMatches, 1 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-14 00:17:26,943 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 2 mSDsluCounter, 617 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 927 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:26,944 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 927 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-14 00:17:26,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1919 states. [2022-07-14 00:17:27,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1919 to 1919. [2022-07-14 00:17:27,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1919 states, 1597 states have (on average 1.3688165309956168) internal successors, (2186), 1601 states have internal predecessors, (2186), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2022-07-14 00:17:27,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1919 states to 1919 states and 2637 transitions. [2022-07-14 00:17:27,024 INFO L78 Accepts]: Start accepts. Automaton has 1919 states and 2637 transitions. Word has length 161 [2022-07-14 00:17:27,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:27,025 INFO L495 AbstractCegarLoop]: Abstraction has 1919 states and 2637 transitions. [2022-07-14 00:17:27,025 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-14 00:17:27,025 INFO L276 IsEmpty]: Start isEmpty. Operand 1919 states and 2637 transitions. [2022-07-14 00:17:27,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-07-14 00:17:27,029 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:27,029 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:27,059 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-14 00:17:27,255 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-07-14 00:17:27,256 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:27,256 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:27,256 INFO L85 PathProgramCache]: Analyzing trace with hash -1686704921, now seen corresponding path program 1 times [2022-07-14 00:17:27,256 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:27,256 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967387005] [2022-07-14 00:17:27,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:27,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:27,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:27,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:27,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:27,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-14 00:17:27,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-14 00:17:27,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-07-14 00:17:27,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-14 00:17:27,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-14 00:17:27,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:27,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:27,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-14 00:17:27,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:27,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:27,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-14 00:17:27,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-14 00:17:27,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:27,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-14 00:17:27,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:27,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:27,685 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2022-07-14 00:17:27,685 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:27,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967387005] [2022-07-14 00:17:27,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [967387005] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-14 00:17:27,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [82997229] [2022-07-14 00:17:27,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:27,686 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-14 00:17:27,686 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 00:17:27,688 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-14 00:17:27,713 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-14 00:17:28,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:28,266 INFO L263 TraceCheckSpWp]: Trace formula consists of 1531 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-14 00:17:28,270 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:17:28,384 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 39 proven. 1 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2022-07-14 00:17:28,385 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-14 00:17:28,582 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2022-07-14 00:17:28,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [82997229] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-14 00:17:28,582 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-14 00:17:28,582 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2022-07-14 00:17:28,582 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288920207] [2022-07-14 00:17:28,582 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-14 00:17:28,583 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-07-14 00:17:28,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:28,583 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-07-14 00:17:28,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2022-07-14 00:17:28,584 INFO L87 Difference]: Start difference. First operand 1919 states and 2637 transitions. Second operand has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2022-07-14 00:17:30,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:30,737 INFO L93 Difference]: Finished difference Result 4187 states and 5818 transitions. [2022-07-14 00:17:30,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-14 00:17:30,738 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) Word has length 163 [2022-07-14 00:17:30,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:30,750 INFO L225 Difference]: With dead ends: 4187 [2022-07-14 00:17:30,750 INFO L226 Difference]: Without dead ends: 2284 [2022-07-14 00:17:30,756 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 351 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-07-14 00:17:30,757 INFO L413 NwaCegarLoop]: 303 mSDtfsCounter, 274 mSDsluCounter, 1060 mSDsCounter, 0 mSdLazyCounter, 543 mSolverCounterSat, 179 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 1363 SdHoareTripleChecker+Invalid, 722 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 179 IncrementalHoareTripleChecker+Valid, 543 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:30,757 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 1363 Invalid, 722 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [179 Valid, 543 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-07-14 00:17:30,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2284 states. [2022-07-14 00:17:30,837 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2284 to 1922. [2022-07-14 00:17:30,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1922 states, 1600 states have (on average 1.368125) internal successors, (2189), 1604 states have internal predecessors, (2189), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2022-07-14 00:17:30,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1922 states to 1922 states and 2640 transitions. [2022-07-14 00:17:30,847 INFO L78 Accepts]: Start accepts. Automaton has 1922 states and 2640 transitions. Word has length 163 [2022-07-14 00:17:30,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:30,848 INFO L495 AbstractCegarLoop]: Abstraction has 1922 states and 2640 transitions. [2022-07-14 00:17:30,848 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2022-07-14 00:17:30,848 INFO L276 IsEmpty]: Start isEmpty. Operand 1922 states and 2640 transitions. [2022-07-14 00:17:30,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2022-07-14 00:17:30,873 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:30,873 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:30,906 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-14 00:17:31,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-14 00:17:31,096 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:31,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:31,096 INFO L85 PathProgramCache]: Analyzing trace with hash 699141421, now seen corresponding path program 2 times [2022-07-14 00:17:31,097 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:31,097 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697752766] [2022-07-14 00:17:31,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:31,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:31,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-14 00:17:31,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-14 00:17:31,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-14 00:17:31,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-07-14 00:17:31,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-14 00:17:31,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-14 00:17:31,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-14 00:17:31,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-07-14 00:17:31,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:31,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:31,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-14 00:17:31,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:31,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-14 00:17:31,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-14 00:17:31,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-14 00:17:31,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:31,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-14 00:17:31,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-14 00:17:31,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:31,816 INFO L134 CoverageAnalysis]: Checked inductivity of 159 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 140 trivial. 0 not checked. [2022-07-14 00:17:31,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 00:17:31,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697752766] [2022-07-14 00:17:31,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697752766] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:31,817 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:17:31,817 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2022-07-14 00:17:31,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [806063671] [2022-07-14 00:17:31,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:31,818 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-07-14 00:17:31,818 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 00:17:31,819 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-07-14 00:17:31,819 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2022-07-14 00:17:31,819 INFO L87 Difference]: Start difference. First operand 1922 states and 2640 transitions. Second operand has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) [2022-07-14 00:17:35,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:35,784 INFO L93 Difference]: Finished difference Result 4519 states and 6356 transitions. [2022-07-14 00:17:35,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-07-14 00:17:35,785 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) Word has length 169 [2022-07-14 00:17:35,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:35,798 INFO L225 Difference]: With dead ends: 4519 [2022-07-14 00:17:35,798 INFO L226 Difference]: Without dead ends: 2628 [2022-07-14 00:17:35,804 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 82 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=97, Invalid=715, Unknown=0, NotChecked=0, Total=812 [2022-07-14 00:17:35,805 INFO L413 NwaCegarLoop]: 361 mSDtfsCounter, 362 mSDsluCounter, 3613 mSDsCounter, 0 mSdLazyCounter, 1966 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 377 SdHoareTripleChecker+Valid, 3974 SdHoareTripleChecker+Invalid, 2165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 1966 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:35,805 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [377 Valid, 3974 Invalid, 2165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 1966 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2022-07-14 00:17:35,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2628 states. [2022-07-14 00:17:35,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2628 to 1962. [2022-07-14 00:17:35,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1962 states, 1632 states have (on average 1.360906862745098) internal successors, (2221), 1636 states have internal predecessors, (2221), 214 states have call successors, (214), 96 states have call predecessors, (214), 115 states have return successors, (253), 229 states have call predecessors, (253), 213 states have call successors, (253) [2022-07-14 00:17:35,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1962 states to 1962 states and 2688 transitions. [2022-07-14 00:17:35,913 INFO L78 Accepts]: Start accepts. Automaton has 1962 states and 2688 transitions. Word has length 169 [2022-07-14 00:17:35,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:35,913 INFO L495 AbstractCegarLoop]: Abstraction has 1962 states and 2688 transitions. [2022-07-14 00:17:35,914 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) [2022-07-14 00:17:35,914 INFO L276 IsEmpty]: Start isEmpty. Operand 1962 states and 2688 transitions. [2022-07-14 00:17:35,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-07-14 00:17:35,918 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:35,918 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:35,918 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-14 00:17:35,918 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:35,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:35,919 INFO L85 PathProgramCache]: Analyzing trace with hash 2025494723, now seen corresponding path program 1 times [2022-07-14 00:17:35,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 00:17:35,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [144253469] [2022-07-14 00:17:35,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:35,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 00:17:36,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 00:17:36,106 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-14 00:17:36,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 00:17:36,354 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-14 00:17:36,355 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-14 00:17:36,356 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-14 00:17:36,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-14 00:17:36,360 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:36,366 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-14 00:17:36,405 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-14 00:17:36,408 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-14 00:17:36,421 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,422 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,422 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,422 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,423 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,423 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,423 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,423 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,423 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,424 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:17:36,427 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,427 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,427 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,427 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,428 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,428 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,428 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,428 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,428 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,429 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,429 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,429 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,429 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,429 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,429 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,430 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,430 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,430 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,430 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,430 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,431 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,431 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,431 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,431 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,431 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,432 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,433 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,433 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,433 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,434 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,435 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,435 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,435 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,435 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,436 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,436 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,436 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,436 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,436 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,436 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,437 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,437 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,437 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,437 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,437 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,438 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,438 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,438 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,439 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,439 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,439 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,440 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,440 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,440 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,440 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,441 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,441 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,441 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,441 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,441 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,442 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,442 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,442 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,442 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,442 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,443 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,443 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,443 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,443 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,443 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:17:36,444 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:17:36,444 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:17:36,607 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.07 12:17:36 BoogieIcfgContainer [2022-07-14 00:17:36,607 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-14 00:17:36,608 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-14 00:17:36,608 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-14 00:17:36,608 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-14 00:17:36,609 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 12:17:07" (3/4) ... [2022-07-14 00:17:36,611 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-14 00:17:36,611 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-14 00:17:36,612 INFO L158 Benchmark]: Toolchain (without parser) took 32044.74ms. Allocated memory was 100.7MB in the beginning and 327.2MB in the end (delta: 226.5MB). Free memory was 73.0MB in the beginning and 116.5MB in the end (delta: -43.5MB). Peak memory consumption was 182.8MB. Max. memory is 16.1GB. [2022-07-14 00:17:36,612 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 100.7MB. Free memory is still 76.5MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-14 00:17:36,613 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1155.40ms. Allocated memory was 100.7MB in the beginning and 132.1MB in the end (delta: 31.5MB). Free memory was 72.9MB in the beginning and 78.6MB in the end (delta: -5.7MB). Peak memory consumption was 48.2MB. Max. memory is 16.1GB. [2022-07-14 00:17:36,613 INFO L158 Benchmark]: Boogie Procedure Inliner took 120.82ms. Allocated memory is still 132.1MB. Free memory was 78.6MB in the beginning and 72.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-14 00:17:36,613 INFO L158 Benchmark]: Boogie Preprocessor took 98.10ms. Allocated memory is still 132.1MB. Free memory was 72.3MB in the beginning and 65.4MB in the end (delta: 6.9MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-14 00:17:36,613 INFO L158 Benchmark]: RCFGBuilder took 1960.48ms. Allocated memory was 132.1MB in the beginning and 188.7MB in the end (delta: 56.6MB). Free memory was 65.4MB in the beginning and 71.1MB in the end (delta: -5.7MB). Peak memory consumption was 69.1MB. Max. memory is 16.1GB. [2022-07-14 00:17:36,614 INFO L158 Benchmark]: TraceAbstraction took 28699.19ms. Allocated memory was 188.7MB in the beginning and 327.2MB in the end (delta: 138.4MB). Free memory was 70.1MB in the beginning and 117.4MB in the end (delta: -47.4MB). Peak memory consumption was 90.9MB. Max. memory is 16.1GB. [2022-07-14 00:17:36,614 INFO L158 Benchmark]: Witness Printer took 3.46ms. Allocated memory is still 327.2MB. Free memory was 117.4MB in the beginning and 116.5MB in the end (delta: 899.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-14 00:17:36,616 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 100.7MB. Free memory is still 76.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1155.40ms. Allocated memory was 100.7MB in the beginning and 132.1MB in the end (delta: 31.5MB). Free memory was 72.9MB in the beginning and 78.6MB in the end (delta: -5.7MB). Peak memory consumption was 48.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 120.82ms. Allocated memory is still 132.1MB. Free memory was 78.6MB in the beginning and 72.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 98.10ms. Allocated memory is still 132.1MB. Free memory was 72.3MB in the beginning and 65.4MB in the end (delta: 6.9MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * RCFGBuilder took 1960.48ms. Allocated memory was 132.1MB in the beginning and 188.7MB in the end (delta: 56.6MB). Free memory was 65.4MB in the beginning and 71.1MB in the end (delta: -5.7MB). Peak memory consumption was 69.1MB. Max. memory is 16.1GB. * TraceAbstraction took 28699.19ms. Allocated memory was 188.7MB in the beginning and 327.2MB in the end (delta: 138.4MB). Free memory was 70.1MB in the beginning and 117.4MB in the end (delta: -47.4MB). Peak memory consumption was 90.9MB. Max. memory is 16.1GB. * Witness Printer took 3.46ms. Allocated memory is still 327.2MB. Free memory was 117.4MB in the beginning and 116.5MB in the end (delta: 899.1kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 5639]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5861. Possible FailurePath: [L5662] int LDV_IN_INTERRUPT = 1; [L5663] int ldv_state_variable_2 ; [L5664] struct usbnet *genelink_info_group0 ; [L5665] int ref_cnt ; [L5666] int ldv_state_variable_1 ; [L5667] int usb_counter ; [L5668] struct usb_interface *gl620a_driver_group1 ; [L5669] int ldv_state_variable_0 ; [L5670] struct sk_buff *genelink_info_group1 ; [L5860-L5862] static struct driver_info const genelink_info = {(char *)"Genesys GeneLink", 4114, & genelink_bind, 0, 0, 0, 0, 0, 0, 0, & genelink_rx_fixup, & genelink_tx_fixup, 0, 0, 1, 2, 0UL}; [L5863-L5865] static struct usb_device_id const products[2U] = { {3U, 1507U, 1282U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned long )(& genelink_info)}}; [L5866] struct usb_device_id const __mod_usb__products_device_table ; [L5867-L5876] static struct usb_driver gl620a_driver = {"gl620a", & usbnet_probe, & usbnet_disconnect, 0, & usbnet_suspend, & usbnet_resume, 0, 0, 0, (struct usb_device_id const *)(& products), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L5893] int ldv_retval_2 ; [L5894] int ldv_retval_5 ; [L5895] int ldv_retval_0 ; [L5896] int ldv_retval_4 ; [L5899] int ldv_retval_1 ; [L5901] int ldv_retval_3 ; [L6187] Element set_impl[15] ; [L6188] int last_index = 0; [L6322] Set LDV_SKBS ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5925] struct usb_device_id *ldvarg1 ; [L5926] void *tmp ; [L5927] pm_message_t ldvarg0 ; [L5928] struct usb_interface *ldvarg3 ; [L5929] void *tmp___0 ; [L5930] gfp_t ldvarg2 ; [L5931] int tmp___1 ; [L5932] int tmp___2 ; [L5933] int tmp___3 ; [L5934] int tmp___4 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=32, tmp___0=1, usb_counter=0] [L5936] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] tmp = ldv_zalloc(32UL) [L5937] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5938] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] tmp___0 = ldv_zalloc(1560UL) [L5939] ldvarg3 = (struct usb_interface *)tmp___0 [L5940] CALL ldv_initialize() [L6341] CALL ldv_set_init(LDV_SKBS) [L6193] set = set_impl [L6194] last_index = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set={0:0}, set={24:0}, set_impl={24:0}, usb_counter=0] [L6341] RET ldv_set_init(LDV_SKBS) [L5940] RET ldv_initialize() [L5941] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5942] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5943] ldv_state_variable_1 = 0 [L5944] ref_cnt = 0 [L5945] ldv_state_variable_0 = 1 [L5946] ldv_state_variable_2 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: [L6028] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L6029] COND TRUE ldv_state_variable_0 == 1 [L6030] CALL, EXPR gl620a_driver_init() [L5879] int tmp ; [L5881] CALL, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L6167] ldv_func_ret_type ldv_func_res ; [L6168] int tmp ; [L6170] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6436] return __VERIFIER_nondet_int(); [L6170] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6170] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6171] ldv_func_res = tmp [L6172] ldv_state_variable_1 = 1 [L6173] usb_counter = 0 [L6174] CALL ldv_usb_driver_1() [L5916] void *tmp ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5918] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] tmp = ldv_zalloc(1560UL) [L5919] gl620a_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L6174] RET ldv_usb_driver_1() [L6175] return (ldv_func_res); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, ldv_func_arg1={23:0}, ldv_func_arg1={23:0}, ldv_func_arg2={4294967334:4294967332}, ldv_func_arg2={4294967334:4294967332}, ldv_func_arg3={20:0}, ldv_func_arg3={20:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L5881] RET, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5881] tmp = ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5882] return (tmp); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L6030] RET, EXPR gl620a_driver_init() [L6030] ldv_retval_4 = gl620a_driver_init() [L6031] COND TRUE ldv_retval_4 == 0 [L6032] ldv_state_variable_0 = 3 [L6033] ldv_state_variable_2 = 1 [L6034] CALL ldv_initialize_driver_info_2() [L5904] void *tmp ; [L5905] void *tmp___0 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] CALL, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1472, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1472, tmp___0=1, usb_counter=0] [L5907] RET, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(1472UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] tmp = ldv_zalloc(1472UL) [L5908] genelink_info_group0 = (struct usbnet *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=232, tmp___0=1, usb_counter=0] [L5909] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] tmp___0 = ldv_zalloc(232UL) [L5910] genelink_info_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L6034] RET ldv_initialize_driver_info_2() [L6037] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: [L6052] case 2: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, usb_counter=0] [L6053] COND TRUE ldv_state_variable_2 != 0 [L6054] tmp___4 = __VERIFIER_nondet_int() [L6056] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6057] COND TRUE ldv_state_variable_2 == 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6058] CALL genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5700] struct gl_header *header ; [L5701] struct gl_packet *packet ; [L5702] struct sk_buff *gl_skb ; [L5703] u32 size ; [L5704] u32 count ; [L5705] struct _ddebug descriptor ; [L5706] long tmp ; [L5707] struct _ddebug descriptor___0 ; [L5708] long tmp___0 ; [L5709] size_t __len ; [L5710] void *__ret ; [L5711] unsigned char *tmp___2 ; [L5712] struct _ddebug descriptor___1 ; [L5713] long tmp___3 ; [L5715] EXPR skb->len [L5715] EXPR dev->net [L5715] EXPR (dev->net)->hard_header_len VAL [(dev->net)->hard_header_len=0, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, dev->net={4294967335:-2}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb->len=0, usb_counter=0] [L5715] COND FALSE !(skb->len < (unsigned int )(dev->net)->hard_header_len) [L5719] EXPR skb->data [L5719] header = (struct gl_header *)skb->data [L5720] EXPR header->packet_count [L5720] count = header->packet_count [L5721] COND FALSE !(count > 32U) [L5737] packet = & header->packets VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5738] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-3, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5738] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, usb_counter=0] [L5771] COND TRUE count > 1U VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5741] EXPR packet->packet_length [L5741] size = packet->packet_length [L5742] COND FALSE !(size > 1514U) [L5758] CALL, EXPR ldv_alloc_skb_12(size, 32U) [L6153] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6325] void *skb ; [L6326] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND FALSE !(tmp___0 != 0) [L5612] EXPR, FCALL calloc(1UL, size) [L5612] tmp = calloc(1UL, size) [L5613] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L5614] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5583] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, cond=1, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5614] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L5615] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551617:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L6328] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6329] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0] [L6330] COND FALSE !(! skb) [L6333] CALL ldv_set_add(LDV_SKBS, skb) [L6201] int i ; [L6203] i = 0 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6204] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6205] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6215] COND TRUE last_index < 15 [L6216] set_impl[last_index] = e [L6217] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6333] RET ldv_set_add(LDV_SKBS, skb) [L6334] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551617:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0] [L6155] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_skb_alloc()={-18446744073709551617:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] tmp = ldv_skb_alloc() [L6156] COND TRUE \read(*tmp) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551617:0}, usb_counter=0] [L6158] CALL, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp___0=-5, usb_counter=0] [L6158] RET, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(size)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551617:0}, usb_counter=0] [L6158] tmp->head = ldv_malloc(size) [L6159] EXPR tmp->head [L6159] tmp->data = tmp->head [L6161] return (tmp); VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, \result={-18446744073709551617:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551617:0}, usb_counter=0] [L5758] RET, EXPR ldv_alloc_skb_12(size, 32U) [L5758] gl_skb = ldv_alloc_skb_12(size, 32U) [L5759] COND TRUE (unsigned long )gl_skb != (unsigned long )((struct sk_buff *)0) [L5760] __len = (size_t )size VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, usb_counter=0] [L5761] CALL, EXPR skb_put(gl_skb, size) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6427] EXPR arg0->data [L6427] EXPR arg0->tail [L6427] unsigned char *ret_val = arg0->data + arg0->tail; [L6428] EXPR arg0->tail [L6428] arg0->tail += arg1 [L6429] return ret_val; VAL [\old(arg1)=null, \old(last_index)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={-18446744073709551617:0}, arg0={-18446744073709551617:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, ret_val={0:0}, set_impl={24:0}, usb_counter=0] [L5761] RET, EXPR skb_put(gl_skb, size) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_put(gl_skb, size)={0:0}, usb_counter=0] [L5761] tmp___2 = skb_put(gl_skb, size) [L5762-L5763] EXPR, FCALL memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5762-L5763] __ret = memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5764] FCALL usbnet_skb_return(dev, gl_skb) [L5767] packet = (struct gl_packet *)(& packet->packet_data) + (unsigned long )size [L5768] count = count - 1U VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5769] CALL skb_pull(skb, size + 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-7, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5769] RET skb_pull(skb, size + 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, size + 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5771] COND FALSE !(count > 1U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5775] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-9, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5775] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5776] EXPR skb->len VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb->len=0, tmp___2={0:0}, usb_counter=0] [L5776] COND FALSE !(skb->len > 1514U) [L5792] return (1); [L5792] return (1); [L5792] return (1); [L5792] return (1); VAL [\old(last_index)=0, \result=1, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L6058] RET genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, genelink_rx_fixup(genelink_info_group0, genelink_info_group1)=1, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6059] ldv_state_variable_2 = 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6062] COND FALSE !(ldv_state_variable_2 == 2) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, tmp___4=0, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6021] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L6022] CALL gl620a_driver_exit() [L5888] CALL ldv_usb_deregister_14(& gl620a_driver) [L6181] FCALL usb_deregister(arg) [L6182] ldv_state_variable_1 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg={23:0}, arg={23:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5888] RET ldv_usb_deregister_14(& gl620a_driver) [L6022] RET gl620a_driver_exit() [L6023] ldv_state_variable_0 = 2 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6112] CALL ldv_check_final_state() [L6392] int tmp___7 ; [L6394] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L6283] return (last_index == 0); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6394] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L6394] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6395] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp___7=0, usb_counter=0] [L6397] CALL ldv_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5639] reach_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 240 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 28.4s, OverallIterations: 10, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 20.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3123 SdHoareTripleChecker+Valid, 18.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2985 mSDsluCounter, 15415 SdHoareTripleChecker+Invalid, 17.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 12342 mSDsCounter, 1273 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6076 IncrementalHoareTripleChecker+Invalid, 7349 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1273 mSolverCounterUnsat, 3073 mSDtfsCounter, 6076 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 965 GetRequests, 851 SyntacticMatches, 2 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 214 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1962occurred in iteration=9, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 9 MinimizatonAttempts, 2749 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 1.4s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 1792 NumberOfCodeBlocks, 1792 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1764 ConstructedInterpolants, 0 QuantifiedInterpolants, 3649 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4343 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 13 InterpolantComputations, 8 PerfectInterpolantSequences, 1180/1200 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-14 00:17:36,703 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-14 00:17:38,619 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-14 00:17:38,621 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-14 00:17:38,665 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-14 00:17:38,666 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-14 00:17:38,668 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-14 00:17:38,672 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-14 00:17:38,674 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-14 00:17:38,676 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-14 00:17:38,687 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-14 00:17:38,689 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-14 00:17:38,691 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-14 00:17:38,691 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-14 00:17:38,694 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-14 00:17:38,695 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-14 00:17:38,702 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-14 00:17:38,703 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-14 00:17:38,704 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-14 00:17:38,706 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-14 00:17:38,710 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-14 00:17:38,712 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-14 00:17:38,713 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-14 00:17:38,715 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-14 00:17:38,716 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-14 00:17:38,717 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-14 00:17:38,724 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-14 00:17:38,726 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-14 00:17:38,727 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-14 00:17:38,728 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-14 00:17:38,729 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-14 00:17:38,729 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-14 00:17:38,730 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-14 00:17:38,731 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-14 00:17:38,732 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-14 00:17:38,734 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-14 00:17:38,735 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-14 00:17:38,735 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-14 00:17:38,735 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-14 00:17:38,736 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-14 00:17:38,736 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-14 00:17:38,737 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-14 00:17:38,738 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-14 00:17:38,744 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-07-14 00:17:38,774 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-14 00:17:38,775 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-14 00:17:38,775 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-14 00:17:38,776 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-14 00:17:38,776 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-14 00:17:38,777 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-14 00:17:38,777 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-14 00:17:38,778 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-14 00:17:38,778 INFO L138 SettingsManager]: * Use SBE=true [2022-07-14 00:17:38,779 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-14 00:17:38,779 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-14 00:17:38,779 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-14 00:17:38,779 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-14 00:17:38,779 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-14 00:17:38,780 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-07-14 00:17:38,780 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-07-14 00:17:38,780 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-07-14 00:17:38,780 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-14 00:17:38,781 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-14 00:17:38,781 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-14 00:17:38,781 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-14 00:17:38,781 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-14 00:17:38,781 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-14 00:17:38,782 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-14 00:17:38,782 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-14 00:17:38,782 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-14 00:17:38,782 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-14 00:17:38,782 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-07-14 00:17:38,783 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-07-14 00:17:38,783 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-14 00:17:38,783 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-14 00:17:38,783 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-14 00:17:38,784 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-07-14 00:17:38,784 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b [2022-07-14 00:17:39,137 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-14 00:17:39,163 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-14 00:17:39,166 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-14 00:17:39,167 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-14 00:17:39,168 INFO L275 PluginConnector]: CDTParser initialized [2022-07-14 00:17:39,170 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-14 00:17:39,229 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/44cdb1e4e/a6240631e6414766a825c14068bc0df0/FLAG8b9771f2c [2022-07-14 00:17:40,056 INFO L306 CDTParser]: Found 1 translation units. [2022-07-14 00:17:40,070 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-14 00:17:40,129 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/44cdb1e4e/a6240631e6414766a825c14068bc0df0/FLAG8b9771f2c [2022-07-14 00:17:40,600 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/44cdb1e4e/a6240631e6414766a825c14068bc0df0 [2022-07-14 00:17:40,603 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-14 00:17:40,616 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-14 00:17:40,619 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-14 00:17:40,619 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-14 00:17:40,623 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-14 00:17:40,623 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 12:17:40" (1/1) ... [2022-07-14 00:17:40,642 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@75f98765 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:40, skipping insertion in model container [2022-07-14 00:17:40,642 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 12:17:40" (1/1) ... [2022-07-14 00:17:40,649 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-14 00:17:40,815 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-14 00:17:42,350 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-14 00:17:43,115 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 00:17:43,169 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-07-14 00:17:43,235 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-14 00:17:43,474 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-14 00:17:43,582 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 00:17:43,623 INFO L203 MainTranslator]: Completed pre-run [2022-07-14 00:17:43,972 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-14 00:17:44,101 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 00:17:44,172 INFO L208 MainTranslator]: Completed translation [2022-07-14 00:17:44,173 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44 WrapperNode [2022-07-14 00:17:44,173 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-14 00:17:44,174 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-14 00:17:44,174 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-14 00:17:44,174 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-14 00:17:44,180 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,263 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,366 INFO L137 Inliner]: procedures = 115, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 932 [2022-07-14 00:17:44,383 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-14 00:17:44,385 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-14 00:17:44,385 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-14 00:17:44,386 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-14 00:17:44,393 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,393 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,425 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,426 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,508 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,526 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,533 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,557 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-14 00:17:44,575 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-14 00:17:44,575 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-14 00:17:44,575 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-14 00:17:44,576 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (1/1) ... [2022-07-14 00:17:44,583 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-14 00:17:44,592 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 00:17:44,614 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-14 00:17:44,653 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-14 00:17:44,712 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-07-14 00:17:44,713 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-07-14 00:17:44,713 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-07-14 00:17:44,713 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-07-14 00:17:44,713 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-07-14 00:17:44,713 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-14 00:17:44,713 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-14 00:17:44,714 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2022-07-14 00:17:44,714 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2022-07-14 00:17:44,714 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-07-14 00:17:44,718 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-07-14 00:17:44,718 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-14 00:17:44,718 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-14 00:17:44,718 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-07-14 00:17:44,718 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-07-14 00:17:44,780 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-14 00:17:44,780 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-14 00:17:44,780 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-07-14 00:17:44,780 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-07-14 00:17:44,780 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-07-14 00:17:44,780 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-07-14 00:17:44,780 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-14 00:17:44,781 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-14 00:17:44,781 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-14 00:17:44,781 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-07-14 00:17:44,781 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2022-07-14 00:17:44,782 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2022-07-14 00:17:44,782 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-07-14 00:17:44,782 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-07-14 00:17:44,783 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-07-14 00:17:44,783 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-07-14 00:17:44,783 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-07-14 00:17:44,783 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-07-14 00:17:44,783 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-14 00:17:44,783 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-14 00:17:44,783 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-14 00:17:44,783 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-14 00:17:45,256 INFO L234 CfgBuilder]: Building ICFG [2022-07-14 00:17:45,258 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-14 00:17:45,545 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-14 00:17:57,604 INFO L275 CfgBuilder]: Performing block encoding [2022-07-14 00:17:57,635 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-14 00:17:57,636 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-14 00:17:57,639 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 12:17:57 BoogieIcfgContainer [2022-07-14 00:17:57,639 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-14 00:17:57,641 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-14 00:17:57,641 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-14 00:17:57,643 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-14 00:17:57,644 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.07 12:17:40" (1/3) ... [2022-07-14 00:17:57,644 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@62e270ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.07 12:17:57, skipping insertion in model container [2022-07-14 00:17:57,645 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 12:17:44" (2/3) ... [2022-07-14 00:17:57,645 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@62e270ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.07 12:17:57, skipping insertion in model container [2022-07-14 00:17:57,645 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 12:17:57" (3/3) ... [2022-07-14 00:17:57,646 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-14 00:17:57,673 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-14 00:17:57,687 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-14 00:17:57,762 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-14 00:17:57,783 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7d3d39ce, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@6615eb60 [2022-07-14 00:17:57,797 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-14 00:17:57,803 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) [2022-07-14 00:17:57,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-07-14 00:17:57,819 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:57,821 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:57,821 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:57,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:57,836 INFO L85 PathProgramCache]: Analyzing trace with hash 721078938, now seen corresponding path program 1 times [2022-07-14 00:17:57,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:17:57,865 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2142400462] [2022-07-14 00:17:57,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:57,866 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:17:57,866 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:17:57,882 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:17:57,883 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-07-14 00:17:58,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:17:58,621 INFO L263 TraceCheckSpWp]: Trace formula consists of 537 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-14 00:17:58,627 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:17:58,923 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-07-14 00:17:58,924 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:17:58,925 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:17:58,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2142400462] [2022-07-14 00:17:58,926 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2142400462] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:17:58,926 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:17:58,926 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 00:17:58,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1507661096] [2022-07-14 00:17:58,948 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:17:58,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-14 00:17:58,952 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:17:58,999 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 00:17:58,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 00:17:59,014 INFO L87 Difference]: Start difference. First operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) Second operand has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-14 00:17:59,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:17:59,393 INFO L93 Difference]: Finished difference Result 476 states and 682 transitions. [2022-07-14 00:17:59,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-14 00:17:59,400 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 42 [2022-07-14 00:17:59,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:17:59,417 INFO L225 Difference]: With dead ends: 476 [2022-07-14 00:17:59,417 INFO L226 Difference]: Without dead ends: 229 [2022-07-14 00:17:59,426 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-14 00:17:59,430 INFO L413 NwaCegarLoop]: 323 mSDtfsCounter, 2 mSDsluCounter, 643 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 966 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-14 00:17:59,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 966 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-14 00:17:59,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2022-07-14 00:17:59,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 229. [2022-07-14 00:17:59,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 184 states have (on average 1.358695652173913) internal successors, (250), 184 states have internal predecessors, (250), 32 states have call successors, (32), 13 states have call predecessors, (32), 12 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2022-07-14 00:17:59,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 313 transitions. [2022-07-14 00:17:59,516 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 313 transitions. Word has length 42 [2022-07-14 00:17:59,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:17:59,524 INFO L495 AbstractCegarLoop]: Abstraction has 229 states and 313 transitions. [2022-07-14 00:17:59,525 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-14 00:17:59,525 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 313 transitions. [2022-07-14 00:17:59,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-14 00:17:59,543 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:17:59,544 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:17:59,581 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-07-14 00:17:59,759 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:17:59,760 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:17:59,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:17:59,760 INFO L85 PathProgramCache]: Analyzing trace with hash 1187275936, now seen corresponding path program 1 times [2022-07-14 00:17:59,761 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:17:59,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [869959872] [2022-07-14 00:17:59,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:17:59,762 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:17:59,762 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:17:59,775 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:17:59,831 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-07-14 00:18:00,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:18:00,542 INFO L263 TraceCheckSpWp]: Trace formula consists of 559 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-14 00:18:00,544 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:00,889 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-07-14 00:18:00,889 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-14 00:18:01,700 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-07-14 00:18:01,701 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:01,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [869959872] [2022-07-14 00:18:01,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [869959872] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-14 00:18:01,702 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-07-14 00:18:01,702 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2022-07-14 00:18:01,702 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [197452632] [2022-07-14 00:18:01,702 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-07-14 00:18:01,703 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-14 00:18:01,703 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:01,704 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-14 00:18:01,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-14 00:18:01,708 INFO L87 Difference]: Start difference. First operand 229 states and 313 transitions. Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-14 00:18:02,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:02,367 INFO L93 Difference]: Finished difference Result 456 states and 626 transitions. [2022-07-14 00:18:02,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-14 00:18:02,368 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 44 [2022-07-14 00:18:02,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:02,373 INFO L225 Difference]: With dead ends: 456 [2022-07-14 00:18:02,373 INFO L226 Difference]: Without dead ends: 232 [2022-07-14 00:18:02,376 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-07-14 00:18:02,377 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 9 mSDsluCounter, 1540 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 1850 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:02,378 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 1850 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-14 00:18:02,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232 states. [2022-07-14 00:18:02,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232 to 232. [2022-07-14 00:18:02,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 187 states have (on average 1.3529411764705883) internal successors, (253), 187 states have internal predecessors, (253), 32 states have call successors, (32), 13 states have call predecessors, (32), 12 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2022-07-14 00:18:02,408 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 316 transitions. [2022-07-14 00:18:02,409 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 316 transitions. Word has length 44 [2022-07-14 00:18:02,409 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:02,409 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 316 transitions. [2022-07-14 00:18:02,410 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-14 00:18:02,410 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 316 transitions. [2022-07-14 00:18:02,413 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-14 00:18:02,413 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:02,414 INFO L195 NwaCegarLoop]: trace histogram [8, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:02,438 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:02,635 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:02,636 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:02,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:02,636 INFO L85 PathProgramCache]: Analyzing trace with hash -1706437862, now seen corresponding path program 2 times [2022-07-14 00:18:02,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:02,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1371424637] [2022-07-14 00:18:02,637 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-14 00:18:02,637 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:02,638 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:02,647 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:02,687 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-07-14 00:18:03,250 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-07-14 00:18:03,250 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-07-14 00:18:03,275 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-14 00:18:03,277 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:03,445 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-07-14 00:18:03,445 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:18:03,446 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:03,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1371424637] [2022-07-14 00:18:03,446 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1371424637] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:18:03,446 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:18:03,446 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 00:18:03,446 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [364448289] [2022-07-14 00:18:03,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:18:03,447 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-14 00:18:03,447 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:03,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 00:18:03,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 00:18:03,448 INFO L87 Difference]: Start difference. First operand 232 states and 316 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-14 00:18:05,541 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.09s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-14 00:18:05,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:05,795 INFO L93 Difference]: Finished difference Result 635 states and 876 transitions. [2022-07-14 00:18:05,796 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 00:18:05,797 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2022-07-14 00:18:05,797 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:05,800 INFO L225 Difference]: With dead ends: 635 [2022-07-14 00:18:05,800 INFO L226 Difference]: Without dead ends: 423 [2022-07-14 00:18:05,801 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 00:18:05,802 INFO L413 NwaCegarLoop]: 343 mSDtfsCounter, 267 mSDsluCounter, 293 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 3 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 267 SdHoareTripleChecker+Valid, 636 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:05,803 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [267 Valid, 636 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 11 Invalid, 1 Unknown, 0 Unchecked, 2.3s Time] [2022-07-14 00:18:05,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 423 states. [2022-07-14 00:18:05,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 423 to 423. [2022-07-14 00:18:05,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 423 states, 343 states have (on average 1.370262390670554) internal successors, (470), 343 states have internal predecessors, (470), 56 states have call successors, (56), 24 states have call predecessors, (56), 23 states have return successors, (55), 55 states have call predecessors, (55), 55 states have call successors, (55) [2022-07-14 00:18:05,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 423 states to 423 states and 581 transitions. [2022-07-14 00:18:05,854 INFO L78 Accepts]: Start accepts. Automaton has 423 states and 581 transitions. Word has length 50 [2022-07-14 00:18:05,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:05,854 INFO L495 AbstractCegarLoop]: Abstraction has 423 states and 581 transitions. [2022-07-14 00:18:05,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-14 00:18:05,855 INFO L276 IsEmpty]: Start isEmpty. Operand 423 states and 581 transitions. [2022-07-14 00:18:05,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-14 00:18:05,857 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:05,857 INFO L195 NwaCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:05,883 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:06,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:06,076 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:06,076 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:06,076 INFO L85 PathProgramCache]: Analyzing trace with hash 1850955474, now seen corresponding path program 1 times [2022-07-14 00:18:06,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:06,077 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [143991142] [2022-07-14 00:18:06,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:18:06,077 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:06,078 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:06,087 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:06,091 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-07-14 00:18:06,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:18:06,895 INFO L263 TraceCheckSpWp]: Trace formula consists of 669 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-14 00:18:06,899 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:07,775 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-07-14 00:18:07,775 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:18:07,775 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:07,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [143991142] [2022-07-14 00:18:07,775 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [143991142] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:18:07,776 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:18:07,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 00:18:07,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [813831682] [2022-07-14 00:18:07,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:18:07,776 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-14 00:18:07,776 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:07,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 00:18:07,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 00:18:07,777 INFO L87 Difference]: Start difference. First operand 423 states and 581 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-14 00:18:08,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:08,454 INFO L93 Difference]: Finished difference Result 1226 states and 1705 transitions. [2022-07-14 00:18:08,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 00:18:08,464 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-07-14 00:18:08,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:08,470 INFO L225 Difference]: With dead ends: 1226 [2022-07-14 00:18:08,470 INFO L226 Difference]: Without dead ends: 817 [2022-07-14 00:18:08,474 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-14 00:18:08,476 INFO L413 NwaCegarLoop]: 344 mSDtfsCounter, 275 mSDsluCounter, 977 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 275 SdHoareTripleChecker+Valid, 1321 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:08,477 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [275 Valid, 1321 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-14 00:18:08,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 817 states. [2022-07-14 00:18:08,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 817 to 817. [2022-07-14 00:18:08,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 817 states, 664 states have (on average 1.3734939759036144) internal successors, (912), 664 states have internal predecessors, (912), 107 states have call successors, (107), 46 states have call predecessors, (107), 45 states have return successors, (112), 106 states have call predecessors, (112), 106 states have call successors, (112) [2022-07-14 00:18:08,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 1131 transitions. [2022-07-14 00:18:08,569 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 1131 transitions. Word has length 60 [2022-07-14 00:18:08,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:08,570 INFO L495 AbstractCegarLoop]: Abstraction has 817 states and 1131 transitions. [2022-07-14 00:18:08,570 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-14 00:18:08,570 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 1131 transitions. [2022-07-14 00:18:08,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-07-14 00:18:08,585 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:08,585 INFO L195 NwaCegarLoop]: trace histogram [8, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:08,613 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:08,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:08,808 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:08,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:08,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1982093192, now seen corresponding path program 1 times [2022-07-14 00:18:08,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:08,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1572880389] [2022-07-14 00:18:08,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:18:08,810 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:08,810 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:08,813 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:08,819 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-07-14 00:18:09,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:18:09,801 INFO L263 TraceCheckSpWp]: Trace formula consists of 913 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-14 00:18:09,806 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:09,909 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2022-07-14 00:18:09,923 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:18:09,924 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:09,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1572880389] [2022-07-14 00:18:09,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1572880389] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:18:09,924 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:18:09,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 00:18:09,925 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [63737407] [2022-07-14 00:18:09,925 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:18:09,925 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-14 00:18:09,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:09,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 00:18:09,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 00:18:09,928 INFO L87 Difference]: Start difference. First operand 817 states and 1131 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-14 00:18:10,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:10,446 INFO L93 Difference]: Finished difference Result 1844 states and 2569 transitions. [2022-07-14 00:18:10,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 00:18:10,446 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 134 [2022-07-14 00:18:10,447 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:10,469 INFO L225 Difference]: With dead ends: 1844 [2022-07-14 00:18:10,469 INFO L226 Difference]: Without dead ends: 1047 [2022-07-14 00:18:10,471 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 00:18:10,472 INFO L413 NwaCegarLoop]: 327 mSDtfsCounter, 111 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 598 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:10,473 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 598 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-14 00:18:10,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1047 states. [2022-07-14 00:18:10,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1047 to 1038. [2022-07-14 00:18:10,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1038 states, 862 states have (on average 1.3979118329466358) internal successors, (1205), 862 states have internal predecessors, (1205), 120 states have call successors, (120), 56 states have call predecessors, (120), 55 states have return successors, (125), 119 states have call predecessors, (125), 119 states have call successors, (125) [2022-07-14 00:18:10,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1038 states to 1038 states and 1450 transitions. [2022-07-14 00:18:10,556 INFO L78 Accepts]: Start accepts. Automaton has 1038 states and 1450 transitions. Word has length 134 [2022-07-14 00:18:10,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:10,557 INFO L495 AbstractCegarLoop]: Abstraction has 1038 states and 1450 transitions. [2022-07-14 00:18:10,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-14 00:18:10,557 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1450 transitions. [2022-07-14 00:18:10,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-07-14 00:18:10,567 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:10,567 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:10,611 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:10,784 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:10,784 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:10,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:10,785 INFO L85 PathProgramCache]: Analyzing trace with hash 888649648, now seen corresponding path program 1 times [2022-07-14 00:18:10,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:10,786 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [521707006] [2022-07-14 00:18:10,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:18:10,786 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:10,786 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:10,789 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:10,791 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-07-14 00:18:11,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:18:11,669 INFO L263 TraceCheckSpWp]: Trace formula consists of 975 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-14 00:18:11,674 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:12,168 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2022-07-14 00:18:12,180 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:18:12,181 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:12,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [521707006] [2022-07-14 00:18:12,181 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [521707006] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:18:12,181 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:18:12,181 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 00:18:12,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [726149247] [2022-07-14 00:18:12,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:18:12,191 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-14 00:18:12,191 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:12,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 00:18:12,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 00:18:12,194 INFO L87 Difference]: Start difference. First operand 1038 states and 1450 transitions. Second operand has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-14 00:18:14,344 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.15s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-14 00:18:15,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:15,086 INFO L93 Difference]: Finished difference Result 2758 states and 3855 transitions. [2022-07-14 00:18:15,086 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 00:18:15,087 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 156 [2022-07-14 00:18:15,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:15,100 INFO L225 Difference]: With dead ends: 2758 [2022-07-14 00:18:15,100 INFO L226 Difference]: Without dead ends: 1751 [2022-07-14 00:18:15,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 154 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 00:18:15,107 INFO L413 NwaCegarLoop]: 452 mSDtfsCounter, 257 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 12 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 720 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:15,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [257 Valid, 720 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 22 Invalid, 1 Unknown, 0 Unchecked, 2.8s Time] [2022-07-14 00:18:15,110 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1751 states. [2022-07-14 00:18:15,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1751 to 1742. [2022-07-14 00:18:15,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1742 states, 1452 states have (on average 1.3836088154269972) internal successors, (2009), 1452 states have internal predecessors, (2009), 194 states have call successors, (194), 96 states have call predecessors, (194), 95 states have return successors, (201), 193 states have call predecessors, (201), 193 states have call successors, (201) [2022-07-14 00:18:15,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1742 states to 1742 states and 2404 transitions. [2022-07-14 00:18:15,206 INFO L78 Accepts]: Start accepts. Automaton has 1742 states and 2404 transitions. Word has length 156 [2022-07-14 00:18:15,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:15,206 INFO L495 AbstractCegarLoop]: Abstraction has 1742 states and 2404 transitions. [2022-07-14 00:18:15,207 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-14 00:18:15,207 INFO L276 IsEmpty]: Start isEmpty. Operand 1742 states and 2404 transitions. [2022-07-14 00:18:15,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-07-14 00:18:15,211 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:15,227 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:15,290 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:15,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:15,443 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:15,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:15,444 INFO L85 PathProgramCache]: Analyzing trace with hash 685653102, now seen corresponding path program 1 times [2022-07-14 00:18:15,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:15,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [432254828] [2022-07-14 00:18:15,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:18:15,445 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:15,445 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:15,457 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:15,504 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-07-14 00:18:16,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:18:16,342 INFO L263 TraceCheckSpWp]: Trace formula consists of 975 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-14 00:18:16,346 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:16,735 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2022-07-14 00:18:16,735 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:18:16,735 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:16,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [432254828] [2022-07-14 00:18:16,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [432254828] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:18:16,736 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:18:16,736 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 00:18:16,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [531066654] [2022-07-14 00:18:16,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:18:16,736 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-14 00:18:16,737 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:16,737 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 00:18:16,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 00:18:16,737 INFO L87 Difference]: Start difference. First operand 1742 states and 2404 transitions. Second operand has 5 states, 5 states have (on average 18.4) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-07-14 00:18:17,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:17,151 INFO L93 Difference]: Finished difference Result 3507 states and 4868 transitions. [2022-07-14 00:18:17,152 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 00:18:17,152 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.4) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 156 [2022-07-14 00:18:17,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:17,161 INFO L225 Difference]: With dead ends: 3507 [2022-07-14 00:18:17,162 INFO L226 Difference]: Without dead ends: 1796 [2022-07-14 00:18:17,166 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 00:18:17,180 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 2 mSDsluCounter, 919 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1229 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:17,181 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1229 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-14 00:18:17,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1796 states. [2022-07-14 00:18:17,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1796 to 1782. [2022-07-14 00:18:17,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1782 states, 1480 states have (on average 1.3763513513513514) internal successors, (2037), 1484 states have internal predecessors, (2037), 194 states have call successors, (194), 96 states have call predecessors, (194), 107 states have return successors, (221), 201 states have call predecessors, (221), 193 states have call successors, (221) [2022-07-14 00:18:17,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1782 states to 1782 states and 2452 transitions. [2022-07-14 00:18:17,348 INFO L78 Accepts]: Start accepts. Automaton has 1782 states and 2452 transitions. Word has length 156 [2022-07-14 00:18:17,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:17,349 INFO L495 AbstractCegarLoop]: Abstraction has 1782 states and 2452 transitions. [2022-07-14 00:18:17,350 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.4) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-07-14 00:18:17,350 INFO L276 IsEmpty]: Start isEmpty. Operand 1782 states and 2452 transitions. [2022-07-14 00:18:17,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-07-14 00:18:17,360 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:17,360 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:17,411 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:17,574 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:17,574 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:17,574 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:17,575 INFO L85 PathProgramCache]: Analyzing trace with hash -1189811930, now seen corresponding path program 1 times [2022-07-14 00:18:17,575 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:17,576 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1033751868] [2022-07-14 00:18:17,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:18:17,576 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:17,576 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:17,578 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:17,580 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-07-14 00:18:18,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:18:18,499 INFO L263 TraceCheckSpWp]: Trace formula consists of 1001 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-14 00:18:18,505 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:19,478 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2022-07-14 00:18:19,478 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:18:19,478 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:19,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1033751868] [2022-07-14 00:18:19,478 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1033751868] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:18:19,478 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:18:19,478 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-14 00:18:19,479 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1924573394] [2022-07-14 00:18:19,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:18:19,479 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-14 00:18:19,479 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:19,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-14 00:18:19,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-07-14 00:18:19,480 INFO L87 Difference]: Start difference. First operand 1782 states and 2452 transitions. Second operand has 10 states, 10 states have (on average 9.7) internal successors, (97), 8 states have internal predecessors, (97), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-14 00:18:21,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:21,324 INFO L93 Difference]: Finished difference Result 3803 states and 5284 transitions. [2022-07-14 00:18:21,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-14 00:18:21,325 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 8 states have internal predecessors, (97), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-07-14 00:18:21,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:21,348 INFO L225 Difference]: With dead ends: 3803 [2022-07-14 00:18:21,349 INFO L226 Difference]: Without dead ends: 2052 [2022-07-14 00:18:21,354 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-07-14 00:18:21,354 INFO L413 NwaCegarLoop]: 360 mSDtfsCounter, 43 mSDsluCounter, 2796 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 3156 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:21,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 3156 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-07-14 00:18:21,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2052 states. [2022-07-14 00:18:21,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2052 to 1806. [2022-07-14 00:18:21,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1806 states, 1500 states have (on average 1.366) internal successors, (2049), 1500 states have internal predecessors, (2049), 194 states have call successors, (194), 96 states have call predecessors, (194), 111 states have return successors, (225), 209 states have call predecessors, (225), 193 states have call successors, (225) [2022-07-14 00:18:21,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1806 states to 1806 states and 2468 transitions. [2022-07-14 00:18:21,500 INFO L78 Accepts]: Start accepts. Automaton has 1806 states and 2468 transitions. Word has length 163 [2022-07-14 00:18:21,500 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:21,500 INFO L495 AbstractCegarLoop]: Abstraction has 1806 states and 2468 transitions. [2022-07-14 00:18:21,501 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 8 states have internal predecessors, (97), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-14 00:18:21,501 INFO L276 IsEmpty]: Start isEmpty. Operand 1806 states and 2468 transitions. [2022-07-14 00:18:21,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2022-07-14 00:18:21,505 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:21,505 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:21,563 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:21,721 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:21,721 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:21,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:21,722 INFO L85 PathProgramCache]: Analyzing trace with hash 699141421, now seen corresponding path program 1 times [2022-07-14 00:18:21,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:21,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [670154070] [2022-07-14 00:18:21,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:18:21,723 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:21,723 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:21,731 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:21,736 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-07-14 00:18:22,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 00:18:22,971 INFO L263 TraceCheckSpWp]: Trace formula consists of 1027 conjuncts, 22 conjunts are in the unsatisfiable core [2022-07-14 00:18:22,975 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 00:18:24,745 INFO L134 CoverageAnalysis]: Checked inductivity of 159 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2022-07-14 00:18:24,745 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-14 00:18:24,745 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-14 00:18:24,745 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [670154070] [2022-07-14 00:18:24,746 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [670154070] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 00:18:24,746 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 00:18:24,746 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-07-14 00:18:24,746 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [575222851] [2022-07-14 00:18:24,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 00:18:24,746 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-07-14 00:18:24,746 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-14 00:18:24,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-07-14 00:18:24,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-07-14 00:18:24,756 INFO L87 Difference]: Start difference. First operand 1806 states and 2468 transitions. Second operand has 13 states, 13 states have (on average 7.538461538461538) internal successors, (98), 10 states have internal predecessors, (98), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-14 00:18:29,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 00:18:29,128 INFO L93 Difference]: Finished difference Result 4083 states and 5652 transitions. [2022-07-14 00:18:29,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-07-14 00:18:29,130 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 7.538461538461538) internal successors, (98), 10 states have internal predecessors, (98), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 169 [2022-07-14 00:18:29,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-14 00:18:29,153 INFO L225 Difference]: With dead ends: 4083 [2022-07-14 00:18:29,153 INFO L226 Difference]: Without dead ends: 2308 [2022-07-14 00:18:29,159 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=54, Invalid=326, Unknown=0, NotChecked=0, Total=380 [2022-07-14 00:18:29,162 INFO L413 NwaCegarLoop]: 394 mSDtfsCounter, 97 mSDsluCounter, 4113 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 4507 SdHoareTripleChecker+Invalid, 294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-07-14 00:18:29,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 4507 Invalid, 294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-07-14 00:18:29,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2308 states. [2022-07-14 00:18:29,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2308 to 1846. [2022-07-14 00:18:29,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1846 states, 1532 states have (on average 1.358355091383812) internal successors, (2081), 1532 states have internal predecessors, (2081), 202 states have call successors, (202), 96 states have call predecessors, (202), 111 states have return successors, (233), 217 states have call predecessors, (233), 201 states have call successors, (233) [2022-07-14 00:18:29,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1846 states to 1846 states and 2516 transitions. [2022-07-14 00:18:29,241 INFO L78 Accepts]: Start accepts. Automaton has 1846 states and 2516 transitions. Word has length 169 [2022-07-14 00:18:29,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-14 00:18:29,241 INFO L495 AbstractCegarLoop]: Abstraction has 1846 states and 2516 transitions. [2022-07-14 00:18:29,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 7.538461538461538) internal successors, (98), 10 states have internal predecessors, (98), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-14 00:18:29,242 INFO L276 IsEmpty]: Start isEmpty. Operand 1846 states and 2516 transitions. [2022-07-14 00:18:29,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-07-14 00:18:29,247 INFO L187 NwaCegarLoop]: Found error trace [2022-07-14 00:18:29,247 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:29,280 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:29,467 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:29,467 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-14 00:18:29,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 00:18:29,468 INFO L85 PathProgramCache]: Analyzing trace with hash 2025494723, now seen corresponding path program 1 times [2022-07-14 00:18:29,469 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-14 00:18:29,469 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2017661477] [2022-07-14 00:18:29,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 00:18:29,469 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-14 00:18:29,469 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-14 00:18:29,471 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-14 00:18:29,473 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-07-14 00:18:35,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 00:18:35,170 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-14 00:18:40,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 00:18:41,237 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-07-14 00:18:41,237 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-14 00:18:41,238 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-14 00:18:41,302 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-07-14 00:18:41,463 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-14 00:18:41,466 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 00:18:41,470 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-14 00:18:41,556 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-14 00:18:41,560 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-14 00:18:41,571 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,586 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,587 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,587 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,588 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,588 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,589 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,589 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,589 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,589 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-14 00:18:41,592 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,592 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,593 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,593 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,593 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,593 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,593 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,594 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,594 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,607 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,607 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,608 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,608 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,608 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,608 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,609 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,609 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,609 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,609 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,609 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,609 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,610 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,610 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,610 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,611 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,612 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,612 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,612 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,612 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,612 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,614 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,614 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,614 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,614 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,614 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,614 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,615 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,615 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,615 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,615 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,615 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,616 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,616 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,616 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,616 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,616 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,616 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,617 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,618 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,618 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,619 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,619 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,619 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,619 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,620 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,620 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,620 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,620 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,620 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,621 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,621 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,621 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,621 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,621 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,621 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,622 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,622 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,622 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,622 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-14 00:18:41,622 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,623 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-14 00:18:41,623 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-14 00:18:41,887 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.07 12:18:41 BoogieIcfgContainer [2022-07-14 00:18:41,887 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-14 00:18:41,888 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-14 00:18:41,888 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-14 00:18:41,888 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-14 00:18:41,889 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 12:17:57" (3/4) ... [2022-07-14 00:18:41,891 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-14 00:18:41,892 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-14 00:18:41,892 INFO L158 Benchmark]: Toolchain (without parser) took 61276.05ms. Allocated memory was 56.6MB in the beginning and 327.2MB in the end (delta: 270.5MB). Free memory was 32.8MB in the beginning and 161.8MB in the end (delta: -129.0MB). Peak memory consumption was 141.0MB. Max. memory is 16.1GB. [2022-07-14 00:18:41,892 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 46.1MB. Free memory was 27.8MB in the beginning and 27.8MB in the end (delta: 31.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-14 00:18:41,893 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3553.84ms. Allocated memory was 56.6MB in the beginning and 119.5MB in the end (delta: 62.9MB). Free memory was 32.7MB in the beginning and 69.6MB in the end (delta: -36.9MB). Peak memory consumption was 51.2MB. Max. memory is 16.1GB. [2022-07-14 00:18:41,893 INFO L158 Benchmark]: Boogie Procedure Inliner took 209.89ms. Allocated memory is still 119.5MB. Free memory was 69.6MB in the beginning and 62.9MB in the end (delta: 6.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-14 00:18:41,894 INFO L158 Benchmark]: Boogie Preprocessor took 188.80ms. Allocated memory is still 119.5MB. Free memory was 62.9MB in the beginning and 55.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-14 00:18:41,894 INFO L158 Benchmark]: RCFGBuilder took 13064.66ms. Allocated memory was 119.5MB in the beginning and 226.5MB in the end (delta: 107.0MB). Free memory was 55.6MB in the beginning and 83.8MB in the end (delta: -28.2MB). Peak memory consumption was 108.9MB. Max. memory is 16.1GB. [2022-07-14 00:18:41,895 INFO L158 Benchmark]: TraceAbstraction took 44246.59ms. Allocated memory was 226.5MB in the beginning and 327.2MB in the end (delta: 100.7MB). Free memory was 83.8MB in the beginning and 161.8MB in the end (delta: -78.0MB). Peak memory consumption was 23.7MB. Max. memory is 16.1GB. [2022-07-14 00:18:41,895 INFO L158 Benchmark]: Witness Printer took 3.50ms. Allocated memory is still 327.2MB. Free memory is still 161.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-14 00:18:41,896 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 46.1MB. Free memory was 27.8MB in the beginning and 27.8MB in the end (delta: 31.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3553.84ms. Allocated memory was 56.6MB in the beginning and 119.5MB in the end (delta: 62.9MB). Free memory was 32.7MB in the beginning and 69.6MB in the end (delta: -36.9MB). Peak memory consumption was 51.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 209.89ms. Allocated memory is still 119.5MB. Free memory was 69.6MB in the beginning and 62.9MB in the end (delta: 6.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 188.80ms. Allocated memory is still 119.5MB. Free memory was 62.9MB in the beginning and 55.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * RCFGBuilder took 13064.66ms. Allocated memory was 119.5MB in the beginning and 226.5MB in the end (delta: 107.0MB). Free memory was 55.6MB in the beginning and 83.8MB in the end (delta: -28.2MB). Peak memory consumption was 108.9MB. Max. memory is 16.1GB. * TraceAbstraction took 44246.59ms. Allocated memory was 226.5MB in the beginning and 327.2MB in the end (delta: 100.7MB). Free memory was 83.8MB in the beginning and 161.8MB in the end (delta: -78.0MB). Peak memory consumption was 23.7MB. Max. memory is 16.1GB. * Witness Printer took 3.50ms. Allocated memory is still 327.2MB. Free memory is still 161.8MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 5639]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5861. Possible FailurePath: [L5662] int LDV_IN_INTERRUPT = 1; [L5663] int ldv_state_variable_2 ; [L5664] struct usbnet *genelink_info_group0 ; [L5665] int ref_cnt ; [L5666] int ldv_state_variable_1 ; [L5667] int usb_counter ; [L5668] struct usb_interface *gl620a_driver_group1 ; [L5669] int ldv_state_variable_0 ; [L5670] struct sk_buff *genelink_info_group1 ; [L5860-L5862] static struct driver_info const genelink_info = {(char *)"Genesys GeneLink", 4114, & genelink_bind, 0, 0, 0, 0, 0, 0, 0, & genelink_rx_fixup, & genelink_tx_fixup, 0, 0, 1, 2, 0UL}; [L5863-L5865] static struct usb_device_id const products[2U] = { {3U, 1507U, 1282U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned long )(& genelink_info)}}; [L5866] struct usb_device_id const __mod_usb__products_device_table ; [L5867-L5876] static struct usb_driver gl620a_driver = {"gl620a", & usbnet_probe, & usbnet_disconnect, 0, & usbnet_suspend, & usbnet_resume, 0, 0, 0, (struct usb_device_id const *)(& products), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L5893] int ldv_retval_2 ; [L5894] int ldv_retval_5 ; [L5895] int ldv_retval_0 ; [L5896] int ldv_retval_4 ; [L5899] int ldv_retval_1 ; [L5901] int ldv_retval_3 ; [L6187] Element set_impl[15] ; [L6188] int last_index = 0; [L6322] Set LDV_SKBS ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5925] struct usb_device_id *ldvarg1 ; [L5926] void *tmp ; [L5927] pm_message_t ldvarg0 ; [L5928] struct usb_interface *ldvarg3 ; [L5929] void *tmp___0 ; [L5930] gfp_t ldvarg2 ; [L5931] int tmp___1 ; [L5932] int tmp___2 ; [L5933] int tmp___3 ; [L5934] int tmp___4 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=32, tmp___0=2147483648, usb_counter=0] [L5936] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={1099511627714:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] tmp = ldv_zalloc(32UL) [L5937] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=2147483648, usb_counter=0] [L5938] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] tmp___0 = ldv_zalloc(1560UL) [L5939] ldvarg3 = (struct usb_interface *)tmp___0 [L5940] CALL ldv_initialize() [L6341] CALL ldv_set_init(LDV_SKBS) [L6193] set = set_impl [L6194] last_index = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set={24:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6341] RET ldv_set_init(LDV_SKBS) [L5940] RET ldv_initialize() [L5941] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={1099511627714:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5942] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5943] ldv_state_variable_1 = 0 [L5944] ref_cnt = 0 [L5945] ldv_state_variable_0 = 1 [L5946] ldv_state_variable_2 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: [L6028] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L6029] COND TRUE ldv_state_variable_0 == 1 [L6030] CALL, EXPR gl620a_driver_init() [L5879] int tmp ; [L5881] CALL, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L6167] ldv_func_ret_type ldv_func_res ; [L6168] int tmp ; [L6170] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6436] return __VERIFIER_nondet_int(); [L6170] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6170] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6171] ldv_func_res = tmp [L6172] ldv_state_variable_1 = 1 [L6173] usb_counter = 0 [L6174] CALL ldv_usb_driver_1() [L5916] void *tmp ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=2147483648, usb_counter=0] [L5918] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] tmp = ldv_zalloc(1560UL) [L5919] gl620a_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L6174] RET ldv_usb_driver_1() [L6175] return (ldv_func_res); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, ldv_func_arg1={23:0}, ldv_func_arg1={23:0}, ldv_func_arg2={25:27}, ldv_func_arg2={25:27}, ldv_func_arg3={20:0}, ldv_func_arg3={20:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L5881] RET, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5881] tmp = ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5882] return (tmp); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L6030] RET, EXPR gl620a_driver_init() [L6030] ldv_retval_4 = gl620a_driver_init() [L6031] COND TRUE ldv_retval_4 == 0 [L6032] ldv_state_variable_0 = 3 [L6033] ldv_state_variable_2 = 1 [L6034] CALL ldv_initialize_driver_info_2() [L5904] void *tmp ; [L5905] void *tmp___0 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] CALL, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1472, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1472, tmp___0=2147483648, usb_counter=0] [L5907] RET, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(1472UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] tmp = ldv_zalloc(1472UL) [L5908] genelink_info_group0 = (struct usbnet *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=232, tmp___0=2147483712, usb_counter=0] [L5909] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] tmp___0 = ldv_zalloc(232UL) [L5910] genelink_info_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L6034] RET ldv_initialize_driver_info_2() [L6037] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: [L6052] case 2: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, usb_counter=0] [L6053] COND TRUE ldv_state_variable_2 != 0 [L6054] tmp___4 = __VERIFIER_nondet_int() [L6056] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6057] COND TRUE ldv_state_variable_2 == 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6058] CALL genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5700] struct gl_header *header ; [L5701] struct gl_packet *packet ; [L5702] struct sk_buff *gl_skb ; [L5703] u32 size ; [L5704] u32 count ; [L5705] struct _ddebug descriptor ; [L5706] long tmp ; [L5707] struct _ddebug descriptor___0 ; [L5708] long tmp___0 ; [L5709] size_t __len ; [L5710] void *__ret ; [L5711] unsigned char *tmp___2 ; [L5712] struct _ddebug descriptor___1 ; [L5713] long tmp___3 ; [L5715] EXPR skb->len [L5715] EXPR dev->net [L5715] EXPR (dev->net)->hard_header_len VAL [(dev->net)->hard_header_len=0, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, dev->net={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb->len=0, usb_counter=0] [L5715] COND FALSE !(skb->len < (unsigned int )(dev->net)->hard_header_len) [L5719] EXPR skb->data [L5719] header = (struct gl_header *)skb->data [L5720] EXPR header->packet_count [L5720] count = header->packet_count [L5721] COND FALSE !(count > 32U) [L5737] packet = & header->packets VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5738] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=2147483648, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5738] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, usb_counter=0] [L5771] COND TRUE count > 1U VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5741] EXPR packet->packet_length [L5741] size = packet->packet_length [L5742] COND FALSE !(size > 1514U) [L5758] CALL, EXPR ldv_alloc_skb_12(size, 32U) [L6153] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6325] void *skb ; [L6326] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND FALSE !(tmp___0 != 0) [L5612] EXPR, FCALL calloc(1UL, size) [L5612] tmp = calloc(1UL, size) [L5613] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, calloc(1UL, size)={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={26:0}, tmp___0=0, usb_counter=0] [L5614] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5583] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, cond=1, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5614] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, calloc(1UL, size)={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={26:0}, tmp___0=0, usb_counter=0] [L5615] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={26:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, calloc(1UL, size)={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={26:0}, tmp___0=0, usb_counter=0] [L6328] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6329] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={26:0}, tmp___7={26:0}, usb_counter=0] [L6330] COND FALSE !(! skb) [L6333] CALL ldv_set_add(LDV_SKBS, skb) [L6201] int i ; [L6203] i = 0 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6204] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6205] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6215] COND TRUE last_index < 15 [L6216] set_impl[last_index] = e [L6217] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6333] RET ldv_set_add(LDV_SKBS, skb) [L6334] return (skb); VAL [\old(last_index)=0, \result={26:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={26:0}, tmp___7={26:0}, usb_counter=0] [L6155] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_skb_alloc()={26:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] tmp = ldv_skb_alloc() [L6156] COND TRUE \read(*tmp) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={26:0}, usb_counter=0] [L6158] CALL, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp___0=2147483648, usb_counter=0] [L6158] RET, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(size)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={26:0}, usb_counter=0] [L6158] tmp->head = ldv_malloc(size) [L6159] EXPR tmp->head [L6159] tmp->data = tmp->head [L6161] return (tmp); VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, \result={26:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={26:0}, usb_counter=0] [L5758] RET, EXPR ldv_alloc_skb_12(size, 32U) [L5758] gl_skb = ldv_alloc_skb_12(size, 32U) [L5759] COND TRUE (unsigned long )gl_skb != (unsigned long )((struct sk_buff *)0) [L5760] __len = (size_t )size VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, usb_counter=0] [L5761] CALL, EXPR skb_put(gl_skb, size) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6427] EXPR arg0->data [L6427] EXPR arg0->tail [L6427] unsigned char *ret_val = arg0->data + arg0->tail; [L6428] EXPR arg0->tail [L6428] arg0->tail += arg1 [L6429] return ret_val; VAL [\old(arg1)=null, \old(last_index)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={26:0}, arg0={26:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, ret_val={0:0}, set_impl={24:0}, usb_counter=0] [L5761] RET, EXPR skb_put(gl_skb, size) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_put(gl_skb, size)={0:0}, usb_counter=0] [L5761] tmp___2 = skb_put(gl_skb, size) [L5762-L5763] EXPR, FCALL memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5762-L5763] __ret = memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5764] FCALL usbnet_skb_return(dev, gl_skb) [L5767] packet = (struct gl_packet *)(& packet->packet_data) + (unsigned long )size [L5768] count = count - 1U VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5769] CALL skb_pull(skb, size + 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=2147483648, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5769] RET skb_pull(skb, size + 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, size + 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5771] COND FALSE !(count > 1U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5775] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=2147483648, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5775] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5776] EXPR skb->len VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb->len=0, tmp___2={0:0}, usb_counter=0] [L5776] COND FALSE !(skb->len > 1514U) [L5792] return (1); [L5792] return (1); [L5792] return (1); [L5792] return (1); VAL [\old(last_index)=0, \result=1, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L6058] RET genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, genelink_rx_fixup(genelink_info_group0, genelink_info_group1)=1, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6059] ldv_state_variable_2 = 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6062] COND FALSE !(ldv_state_variable_2 == 2) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, tmp___4=0, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6021] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L6022] CALL gl620a_driver_exit() [L5888] CALL ldv_usb_deregister_14(& gl620a_driver) [L6181] FCALL usb_deregister(arg) [L6182] ldv_state_variable_1 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg={23:0}, arg={23:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5888] RET ldv_usb_deregister_14(& gl620a_driver) [L6022] RET gl620a_driver_exit() [L6023] ldv_state_variable_0 = 2 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6112] CALL ldv_check_final_state() [L6392] int tmp___7 ; [L6394] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L6283] return (last_index == 0); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6394] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L6394] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6395] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp___7=0, usb_counter=0] [L6397] CALL ldv_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5639] reach_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 240 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 43.7s, OverallIterations: 10, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 14.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 2 mSolverCounterUnknown, 1076 SdHoareTripleChecker+Valid, 11.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1063 mSDsluCounter, 14983 SdHoareTripleChecker+Invalid, 10.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 11820 mSDsCounter, 46 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 504 IncrementalHoareTripleChecker+Invalid, 552 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 46 mSolverCounterUnsat, 3163 mSDtfsCounter, 504 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1026 GetRequests, 975 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 5.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1846occurred in iteration=9, InterpolantAutomatonStates: 57, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 9 MinimizatonAttempts, 740 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 9.6s SatisfiabilityAnalysisTime, 6.7s InterpolantComputationTime, 1152 NumberOfCodeBlocks, 1132 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 1008 ConstructedInterpolants, 0 QuantifiedInterpolants, 1367 SizeOfPredicates, 22 NumberOfNonLiveVariables, 7157 ConjunctsInSsa, 59 ConjunctsInUnsatCore, 10 InterpolantComputations, 8 PerfectInterpolantSequences, 841/849 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-14 00:18:42,091 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample