./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 173e3943 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-173e394 [2021-11-06 14:45:30,103 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-06 14:45:30,105 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-06 14:45:30,163 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-06 14:45:30,167 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-06 14:45:30,170 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-06 14:45:30,172 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-06 14:45:30,175 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-06 14:45:30,176 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-06 14:45:30,181 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-06 14:45:30,182 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-06 14:45:30,183 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-06 14:45:30,183 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-06 14:45:30,185 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-06 14:45:30,186 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-06 14:45:30,188 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-06 14:45:30,190 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-06 14:45:30,191 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-06 14:45:30,192 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-06 14:45:30,196 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-06 14:45:30,197 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-06 14:45:30,197 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-06 14:45:30,198 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-06 14:45:30,199 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-06 14:45:30,201 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-06 14:45:30,202 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-06 14:45:30,202 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-06 14:45:30,202 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-06 14:45:30,203 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-06 14:45:30,204 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-06 14:45:30,204 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-06 14:45:30,204 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-06 14:45:30,205 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-06 14:45:30,206 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-06 14:45:30,207 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-06 14:45:30,207 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-06 14:45:30,208 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-06 14:45:30,208 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-06 14:45:30,208 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-06 14:45:30,209 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-06 14:45:30,210 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-06 14:45:30,210 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-06 14:45:30,248 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-06 14:45:30,248 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-06 14:45:30,250 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-06 14:45:30,250 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-06 14:45:30,251 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-06 14:45:30,251 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-06 14:45:30,251 INFO L138 SettingsManager]: * Use SBE=true [2021-11-06 14:45:30,252 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-06 14:45:30,252 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-06 14:45:30,252 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-06 14:45:30,252 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-06 14:45:30,253 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-06 14:45:30,253 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-06 14:45:30,253 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-06 14:45:30,253 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-06 14:45:30,253 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-06 14:45:30,253 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-06 14:45:30,253 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-06 14:45:30,253 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-06 14:45:30,254 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 14:45:30,254 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-06 14:45:30,254 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-06 14:45:30,254 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-06 14:45:30,254 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-06 14:45:30,254 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-06 14:45:30,255 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-06 14:45:30,255 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-06 14:45:30,256 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-06 14:45:30,256 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-06 14:45:30,256 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-11-06 14:45:30,432 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-06 14:45:30,451 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-06 14:45:30,454 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-06 14:45:30,455 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-06 14:45:30,456 INFO L275 PluginConnector]: CDTParser initialized [2021-11-06 14:45:30,457 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-06 14:45:30,497 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/41c1b71cc/69cacb21b4754c8b8a8486d4904c1bea/FLAGc7ea9a130 [2021-11-06 14:45:31,108 INFO L306 CDTParser]: Found 1 translation units. [2021-11-06 14:45:31,108 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-06 14:45:31,143 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/41c1b71cc/69cacb21b4754c8b8a8486d4904c1bea/FLAGc7ea9a130 [2021-11-06 14:45:31,529 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/41c1b71cc/69cacb21b4754c8b8a8486d4904c1bea [2021-11-06 14:45:31,531 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-06 14:45:31,532 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-06 14:45:31,533 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-06 14:45:31,533 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-06 14:45:31,536 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-06 14:45:31,536 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 02:45:31" (1/1) ... [2021-11-06 14:45:31,537 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2ad5120f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:31, skipping insertion in model container [2021-11-06 14:45:31,537 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 02:45:31" (1/1) ... [2021-11-06 14:45:31,542 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-06 14:45:31,608 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-06 14:45:32,271 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-06 14:45:32,978 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 14:45:33,000 INFO L203 MainTranslator]: Completed pre-run [2021-11-06 14:45:33,110 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-06 14:45:33,271 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 14:45:33,377 INFO L208 MainTranslator]: Completed translation [2021-11-06 14:45:33,378 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33 WrapperNode [2021-11-06 14:45:33,378 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-06 14:45:33,380 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-06 14:45:33,380 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-06 14:45:33,380 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-06 14:45:33,392 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:33,470 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:33,750 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-06 14:45:33,751 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-06 14:45:33,751 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-06 14:45:33,751 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-06 14:45:33,757 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:33,758 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:33,811 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:33,811 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:33,967 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:33,996 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:34,018 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:34,052 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-06 14:45:34,054 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-06 14:45:34,054 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-06 14:45:34,054 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-06 14:45:34,055 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (1/1) ... [2021-11-06 14:45:34,061 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 14:45:34,068 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-06 14:45:34,079 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-06 14:45:34,095 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-06 14:45:34,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-06 14:45:34,114 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-06 14:45:34,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-06 14:45:34,115 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-06 14:45:34,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-06 14:45:34,115 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-06 14:45:34,116 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-06 14:45:34,117 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-06 14:45:34,117 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-06 14:45:34,117 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-06 14:45:34,117 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-06 14:46:04,823 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-06 14:46:04,823 INFO L299 CfgBuilder]: Removed 1011 assume(true) statements. [2021-11-06 14:46:04,827 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 02:46:04 BoogieIcfgContainer [2021-11-06 14:46:04,827 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-06 14:46:04,828 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-06 14:46:04,828 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-06 14:46:04,832 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-06 14:46:04,832 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 02:45:31" (1/3) ... [2021-11-06 14:46:04,833 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ece3319 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 02:46:04, skipping insertion in model container [2021-11-06 14:46:04,833 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:45:33" (2/3) ... [2021-11-06 14:46:04,833 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ece3319 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 02:46:04, skipping insertion in model container [2021-11-06 14:46:04,833 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 02:46:04" (3/3) ... [2021-11-06 14:46:04,834 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-06 14:46:04,838 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-06 14:46:04,839 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-06 14:46:04,884 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-06 14:46:04,893 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-06 14:46:04,933 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-06 14:46:04,970 INFO L276 IsEmpty]: Start isEmpty. Operand has 1260 states, 1258 states have (on average 1.4483306836248013) internal successors, (1822), 1259 states have internal predecessors, (1822), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:04,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-11-06 14:46:04,982 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:46:04,983 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:46:04,983 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:46:04,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:46:04,990 INFO L85 PathProgramCache]: Analyzing trace with hash -934490734, now seen corresponding path program 1 times [2021-11-06 14:46:04,996 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 14:46:04,997 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1659929978] [2021-11-06 14:46:04,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:46:04,998 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 14:46:05,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:46:05,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:46:05,667 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 14:46:05,667 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1659929978] [2021-11-06 14:46:05,667 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1659929978] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 14:46:05,668 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:46:05,668 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 14:46:05,669 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [753123322] [2021-11-06 14:46:05,672 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 14:46:05,672 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 14:46:05,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 14:46:05,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 14:46:05,685 INFO L87 Difference]: Start difference. First operand has 1260 states, 1258 states have (on average 1.4483306836248013) internal successors, (1822), 1259 states have internal predecessors, (1822), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:10,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:46:10,083 INFO L93 Difference]: Finished difference Result 3710 states and 5375 transitions. [2021-11-06 14:46:10,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 14:46:10,085 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-11-06 14:46:10,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:46:10,106 INFO L225 Difference]: With dead ends: 3710 [2021-11-06 14:46:10,106 INFO L226 Difference]: Without dead ends: 2439 [2021-11-06 14:46:10,114 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 14:46:10,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2439 states. [2021-11-06 14:46:10,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2439 to 2439. [2021-11-06 14:46:10,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2439 states, 2438 states have (on average 1.4298605414273995) internal successors, (3486), 2438 states have internal predecessors, (3486), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:10,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2439 states to 2439 states and 3486 transitions. [2021-11-06 14:46:10,220 INFO L78 Accepts]: Start accepts. Automaton has 2439 states and 3486 transitions. Word has length 27 [2021-11-06 14:46:10,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:46:10,221 INFO L470 AbstractCegarLoop]: Abstraction has 2439 states and 3486 transitions. [2021-11-06 14:46:10,224 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:10,224 INFO L276 IsEmpty]: Start isEmpty. Operand 2439 states and 3486 transitions. [2021-11-06 14:46:10,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-11-06 14:46:10,227 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:46:10,228 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:46:10,228 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-06 14:46:10,229 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:46:10,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:46:10,231 INFO L85 PathProgramCache]: Analyzing trace with hash 275680403, now seen corresponding path program 1 times [2021-11-06 14:46:10,232 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 14:46:10,232 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1866627614] [2021-11-06 14:46:10,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:46:10,232 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 14:46:10,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:46:10,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:46:10,641 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 14:46:10,641 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1866627614] [2021-11-06 14:46:10,641 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1866627614] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 14:46:10,641 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:46:10,641 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-06 14:46:10,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [480693354] [2021-11-06 14:46:10,642 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-06 14:46:10,642 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 14:46:10,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-06 14:46:10,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-06 14:46:10,643 INFO L87 Difference]: Start difference. First operand 2439 states and 3486 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:11,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:46:11,156 INFO L93 Difference]: Finished difference Result 7269 states and 10403 transitions. [2021-11-06 14:46:11,157 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-06 14:46:11,157 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2021-11-06 14:46:11,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:46:11,173 INFO L225 Difference]: With dead ends: 7269 [2021-11-06 14:46:11,173 INFO L226 Difference]: Without dead ends: 4845 [2021-11-06 14:46:11,178 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-06 14:46:11,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4845 states. [2021-11-06 14:46:11,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4845 to 4845. [2021-11-06 14:46:11,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4845 states, 4844 states have (on average 1.430429397192403) internal successors, (6929), 4844 states have internal predecessors, (6929), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:11,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4845 states to 4845 states and 6929 transitions. [2021-11-06 14:46:11,286 INFO L78 Accepts]: Start accepts. Automaton has 4845 states and 6929 transitions. Word has length 28 [2021-11-06 14:46:11,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:46:11,287 INFO L470 AbstractCegarLoop]: Abstraction has 4845 states and 6929 transitions. [2021-11-06 14:46:11,288 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:11,288 INFO L276 IsEmpty]: Start isEmpty. Operand 4845 states and 6929 transitions. [2021-11-06 14:46:11,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-06 14:46:11,294 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:46:11,294 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:46:11,295 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-06 14:46:11,297 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:46:11,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:46:11,298 INFO L85 PathProgramCache]: Analyzing trace with hash -989906930, now seen corresponding path program 1 times [2021-11-06 14:46:11,298 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 14:46:11,299 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [733009410] [2021-11-06 14:46:11,299 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:46:11,299 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 14:46:11,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:46:11,599 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:46:11,600 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 14:46:11,600 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [733009410] [2021-11-06 14:46:11,600 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [733009410] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 14:46:11,600 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:46:11,600 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 14:46:11,601 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1724509359] [2021-11-06 14:46:11,601 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 14:46:11,601 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 14:46:11,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 14:46:11,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 14:46:11,602 INFO L87 Difference]: Start difference. First operand 4845 states and 6929 transitions. Second operand has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:12,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:46:12,362 INFO L93 Difference]: Finished difference Result 7866 states and 11266 transitions. [2021-11-06 14:46:12,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 14:46:12,362 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2021-11-06 14:46:12,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:46:12,371 INFO L225 Difference]: With dead ends: 7866 [2021-11-06 14:46:12,372 INFO L226 Difference]: Without dead ends: 3044 [2021-11-06 14:46:12,379 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 14:46:12,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3044 states. [2021-11-06 14:46:12,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3044 to 3022. [2021-11-06 14:46:12,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3022 states, 3021 states have (on average 1.4356173452499172) internal successors, (4337), 3021 states have internal predecessors, (4337), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:12,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3022 states to 3022 states and 4337 transitions. [2021-11-06 14:46:12,507 INFO L78 Accepts]: Start accepts. Automaton has 3022 states and 4337 transitions. Word has length 60 [2021-11-06 14:46:12,508 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:46:12,508 INFO L470 AbstractCegarLoop]: Abstraction has 3022 states and 4337 transitions. [2021-11-06 14:46:12,508 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:12,508 INFO L276 IsEmpty]: Start isEmpty. Operand 3022 states and 4337 transitions. [2021-11-06 14:46:12,511 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2021-11-06 14:46:12,512 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:46:12,512 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:46:12,512 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-06 14:46:12,513 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:46:12,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:46:12,513 INFO L85 PathProgramCache]: Analyzing trace with hash 1863411823, now seen corresponding path program 1 times [2021-11-06 14:46:12,514 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 14:46:12,514 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902638208] [2021-11-06 14:46:12,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:46:12,514 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 14:46:12,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:46:13,111 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-06 14:46:13,111 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 14:46:13,111 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902638208] [2021-11-06 14:46:13,111 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1902638208] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 14:46:13,111 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:46:13,111 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-06 14:46:13,112 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [829021222] [2021-11-06 14:46:13,112 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-06 14:46:13,112 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 14:46:13,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-06 14:46:13,112 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-06 14:46:13,113 INFO L87 Difference]: Start difference. First operand 3022 states and 4337 transitions. Second operand has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:13,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:46:13,844 INFO L93 Difference]: Finished difference Result 13710 states and 19696 transitions. [2021-11-06 14:46:13,844 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-06 14:46:13,844 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 83 [2021-11-06 14:46:13,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:46:13,879 INFO L225 Difference]: With dead ends: 13710 [2021-11-06 14:46:13,879 INFO L226 Difference]: Without dead ends: 10892 [2021-11-06 14:46:13,888 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-06 14:46:13,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10892 states. [2021-11-06 14:46:14,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10892 to 3030. [2021-11-06 14:46:14,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3030 states, 3029 states have (on average 1.4344668207329152) internal successors, (4345), 3029 states have internal predecessors, (4345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:14,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3030 states to 3030 states and 4345 transitions. [2021-11-06 14:46:14,025 INFO L78 Accepts]: Start accepts. Automaton has 3030 states and 4345 transitions. Word has length 83 [2021-11-06 14:46:14,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:46:14,027 INFO L470 AbstractCegarLoop]: Abstraction has 3030 states and 4345 transitions. [2021-11-06 14:46:14,027 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:14,027 INFO L276 IsEmpty]: Start isEmpty. Operand 3030 states and 4345 transitions. [2021-11-06 14:46:14,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2021-11-06 14:46:14,032 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:46:14,032 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:46:14,032 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-06 14:46:14,032 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:46:14,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:46:14,033 INFO L85 PathProgramCache]: Analyzing trace with hash -934608745, now seen corresponding path program 1 times [2021-11-06 14:46:14,033 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 14:46:14,034 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1836390347] [2021-11-06 14:46:14,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:46:14,034 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 14:46:23,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:46:24,211 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-06 14:46:24,211 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 14:46:24,211 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1836390347] [2021-11-06 14:46:24,212 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1836390347] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 14:46:24,212 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:46:24,212 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-06 14:46:24,212 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1899872117] [2021-11-06 14:46:24,212 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-06 14:46:24,212 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 14:46:24,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-06 14:46:24,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-11-06 14:46:24,213 INFO L87 Difference]: Start difference. First operand 3030 states and 4345 transitions. Second operand has 10 states, 10 states have (on average 8.4) internal successors, (84), 10 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:31,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:46:31,649 INFO L93 Difference]: Finished difference Result 17420 states and 24989 transitions. [2021-11-06 14:46:31,650 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-11-06 14:46:31,650 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.4) internal successors, (84), 10 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 86 [2021-11-06 14:46:31,651 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:46:31,699 INFO L225 Difference]: With dead ends: 17420 [2021-11-06 14:46:31,699 INFO L226 Difference]: Without dead ends: 14594 [2021-11-06 14:46:31,712 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 164 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=265, Invalid=665, Unknown=0, NotChecked=0, Total=930 [2021-11-06 14:46:31,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14594 states. [2021-11-06 14:46:31,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14594 to 3042. [2021-11-06 14:46:31,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3042 states, 3041 states have (on average 1.4314370272936534) internal successors, (4353), 3041 states have internal predecessors, (4353), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:31,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3042 states to 3042 states and 4353 transitions. [2021-11-06 14:46:31,970 INFO L78 Accepts]: Start accepts. Automaton has 3042 states and 4353 transitions. Word has length 86 [2021-11-06 14:46:31,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:46:31,972 INFO L470 AbstractCegarLoop]: Abstraction has 3042 states and 4353 transitions. [2021-11-06 14:46:31,972 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.4) internal successors, (84), 10 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:46:31,972 INFO L276 IsEmpty]: Start isEmpty. Operand 3042 states and 4353 transitions. [2021-11-06 14:46:31,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2021-11-06 14:46:31,976 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:46:31,976 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:46:31,976 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-06 14:46:31,977 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:46:31,977 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:46:31,977 INFO L85 PathProgramCache]: Analyzing trace with hash -723596056, now seen corresponding path program 1 times [2021-11-06 14:46:31,978 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 14:46:31,981 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1078913880] [2021-11-06 14:46:31,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:46:31,981 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 14:46:40,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-06 14:46:40,597 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-06 14:46:46,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-06 14:46:47,160 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-06 14:46:47,160 INFO L627 BasicCegarLoop]: Counterexample is feasible [2021-11-06 14:46:47,161 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 14:46:47,162 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-06 14:46:47,167 INFO L731 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2021-11-06 14:46:47,169 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-06 14:46:47,308 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,309 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,311 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,311 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,312 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,313 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,314 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,314 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,316 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,317 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,319 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,319 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,321 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,321 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,322 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,323 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,324 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,324 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,326 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,326 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,328 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,329 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,331 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,331 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,333 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,333 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,335 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,335 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,337 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,337 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,339 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,339 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,340 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,341 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,342 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,342 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,344 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,345 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,346 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,347 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,348 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,348 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,350 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,351 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,352 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,352 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,354 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,354 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,357 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,357 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,359 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,359 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,361 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,361 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,363 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,363 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,365 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,365 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,367 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,368 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,370 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,371 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,373 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,374 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,376 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,377 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,378 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,379 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,381 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,382 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,383 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,384 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,385 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,386 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,388 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,388 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,389 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,390 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,391 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,391 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,393 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,393 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,394 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,395 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,397 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,398 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,400 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,400 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,403 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,403 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,406 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,406 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,409 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,409 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,411 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,412 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,414 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,415 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,417 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,417 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,419 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,420 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,422 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,422 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,425 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,425 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,427 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:47,427 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2021-11-06 14:46:48,519 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 02:46:48 BoogieIcfgContainer [2021-11-06 14:46:48,519 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-06 14:46:48,520 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-06 14:46:48,520 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-06 14:46:48,520 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-06 14:46:48,521 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 02:46:04" (3/4) ... [2021-11-06 14:46:48,523 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-06 14:46:48,523 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-06 14:46:48,525 INFO L168 Benchmark]: Toolchain (without parser) took 76991.65 ms. Allocated memory was 96.5 MB in the beginning and 2.0 GB in the end (delta: 1.9 GB). Free memory was 64.8 MB in the beginning and 1.4 GB in the end (delta: -1.4 GB). Peak memory consumption was 495.6 MB. Max. memory is 16.1 GB. [2021-11-06 14:46:48,526 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 96.5 MB. Free memory is still 74.9 MB. There was no memory consumed. Max. memory is 16.1 GB. [2021-11-06 14:46:48,529 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1846.15 ms. Allocated memory was 96.5 MB in the beginning and 151.0 MB in the end (delta: 54.5 MB). Free memory was 64.8 MB in the beginning and 62.8 MB in the end (delta: 2.0 MB). Peak memory consumption was 74.5 MB. Max. memory is 16.1 GB. [2021-11-06 14:46:48,529 INFO L168 Benchmark]: Boogie Procedure Inliner took 370.50 ms. Allocated memory is still 151.0 MB. Free memory was 62.8 MB in the beginning and 47.1 MB in the end (delta: 15.7 MB). Peak memory consumption was 18.9 MB. Max. memory is 16.1 GB. [2021-11-06 14:46:48,529 INFO L168 Benchmark]: Boogie Preprocessor took 301.96 ms. Allocated memory was 151.0 MB in the beginning and 205.5 MB in the end (delta: 54.5 MB). Free memory was 47.1 MB in the beginning and 92.0 MB in the end (delta: -44.9 MB). Peak memory consumption was 21.7 MB. Max. memory is 16.1 GB. [2021-11-06 14:46:48,531 INFO L168 Benchmark]: RCFGBuilder took 30773.31 ms. Allocated memory was 205.5 MB in the beginning and 887.1 MB in the end (delta: 681.6 MB). Free memory was 92.0 MB in the beginning and 260.4 MB in the end (delta: -168.4 MB). Peak memory consumption was 526.5 MB. Max. memory is 16.1 GB. [2021-11-06 14:46:48,531 INFO L168 Benchmark]: TraceAbstraction took 43690.94 ms. Allocated memory was 887.1 MB in the beginning and 2.0 GB in the end (delta: 1.1 GB). Free memory was 260.4 MB in the beginning and 1.4 GB in the end (delta: -1.2 GB). Peak memory consumption was 763.9 MB. Max. memory is 16.1 GB. [2021-11-06 14:46:48,532 INFO L168 Benchmark]: Witness Printer took 3.74 ms. Allocated memory is still 2.0 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 16.1 GB. [2021-11-06 14:46:48,534 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 96.5 MB. Free memory is still 74.9 MB. There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 1846.15 ms. Allocated memory was 96.5 MB in the beginning and 151.0 MB in the end (delta: 54.5 MB). Free memory was 64.8 MB in the beginning and 62.8 MB in the end (delta: 2.0 MB). Peak memory consumption was 74.5 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 370.50 ms. Allocated memory is still 151.0 MB. Free memory was 62.8 MB in the beginning and 47.1 MB in the end (delta: 15.7 MB). Peak memory consumption was 18.9 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 301.96 ms. Allocated memory was 151.0 MB in the beginning and 205.5 MB in the end (delta: 54.5 MB). Free memory was 47.1 MB in the beginning and 92.0 MB in the end (delta: -44.9 MB). Peak memory consumption was 21.7 MB. Max. memory is 16.1 GB. * RCFGBuilder took 30773.31 ms. Allocated memory was 205.5 MB in the beginning and 887.1 MB in the end (delta: 681.6 MB). Free memory was 92.0 MB in the beginning and 260.4 MB in the end (delta: -168.4 MB). Peak memory consumption was 526.5 MB. Max. memory is 16.1 GB. * TraceAbstraction took 43690.94 ms. Allocated memory was 887.1 MB in the beginning and 2.0 GB in the end (delta: 1.1 GB). Free memory was 260.4 MB in the beginning and 1.4 GB in the end (delta: -1.2 GB). Peak memory consumption was 763.9 MB. Max. memory is 16.1 GB. * Witness Printer took 3.74 ms. Allocated memory is still 2.0 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7417]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 7550, overapproximation of bitwiseOr at line 9385, overapproximation of bitwiseAnd at line 9183. Possible FailurePath: [L7440] int ldv_state_variable_3 ; [L7441] int LDV_IN_INTERRUPT = 1; [L7442] int ldv_state_variable_2 ; [L7443] struct sdio_func *mwifiex_sdio_group0 ; [L7444] int ref_cnt ; [L7445] struct mwifiex_adapter *sdio_ops_group0 ; [L7446] int ldv_state_variable_1 ; [L7447] struct device *mwifiex_sdio_pm_ops_group1 ; [L7448] int ldv_state_variable_4 ; [L7449] int ldv_state_variable_0 ; [L7450] struct sk_buff *sdio_ops_group1 ; [L7543-L7545] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd87xx = {1U, 1U, 64U, 65U, 48U, 3U, 96U, 97U, 63U, 65534U, 64U, 4U, 5U, (unsigned char)0, (unsigned char)0, 6U, 7U, (unsigned char)0, (unsigned char)0, 8U, 9U, 108U}; [L7546-L7548] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd8897 = {0U, 0U, 96U, 97U, 80U, 195U, 192U, 193U, 255U, 4294967295U, 184U, 4U, 5U, 6U, 7U, 8U, 9U, 10U, 11U, 12U, 13U, 204U}; [L7549-L7551] static struct mwifiex_sdio_device const mwifiex_sdio_sd8786 = {"mrvl/sd8786_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7552-L7554] static struct mwifiex_sdio_device const mwifiex_sdio_sd8787 = {"mrvl/sd8787_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7555-L7557] static struct mwifiex_sdio_device const mwifiex_sdio_sd8797 = {"mrvl/sd8797_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7558-L7560] static struct mwifiex_sdio_device const mwifiex_sdio_sd8897 = {"mrvl/sd8897_uapsta.bin", & mwifiex_reg_sd8897, 32U, 16U, 1, 0, 4096U, 32768U, 32768U}; [L7646] static u8 user_rmmod ; [L7648] static struct semaphore add_remove_card_sem ; [L7879-L7882] static struct sdio_device_id const mwifiex_ids[5U] = { {255U, 735U, 37142U, (unsigned long )(& mwifiex_sdio_sd8786)}, {255U, 735U, 37145U, (unsigned long )(& mwifiex_sdio_sd8787)}, {255U, 735U, 37161U, (unsigned long )(& mwifiex_sdio_sd8797)}, {255U, 735U, 37165U, (unsigned long )(& mwifiex_sdio_sd8897)}}; [L7883] struct sdio_device_id const __mod_sdio__mwifiex_ids_device_table ; [L7884-L7886] static struct dev_pm_ops const mwifiex_sdio_pm_ops = {0, 0, & mwifiex_sdio_suspend, & mwifiex_sdio_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7887-L7889] static struct sdio_driver mwifiex_sdio = {(char *)"mwifiex_sdio", (struct sdio_device_id const *)(& mwifiex_ids), & mwifiex_sdio_probe, & mwifiex_sdio_remove, {0, 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_sdio_pm_ops, 0}}; [L9929] static struct mmc_host *reset_host ; [L9954-L9955] static struct work_struct card_reset_work = {{137438953424L}, {& card_reset_work.entry, & card_reset_work.entry}, & sdio_card_reset_worker, {(struct lock_class_key *)(& card_reset_work), {0, 0}, "card_reset_work", 0, 0UL}}; [L9966-L9972] static struct mwifiex_if_ops sdio_ops = {& mwifiex_init_sdio, & mwifiex_cleanup_sdio, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_sdio_enable_host_int, & mwifiex_sdio_disable_host_int, & mwifiex_process_int_status, & mwifiex_sdio_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, & mwifiex_update_mp_end_port, & mwifiex_cleanup_mpa_buf, & mwifiex_sdio_cmdrsp_complete, & mwifiex_sdio_cmdrsp_complete, 0, 0, 0, & mwifiex_sdio_card_reset, 0, 0}; [L9999] int ldv_retval_2 ; [L10000] int ldv_retval_5 ; [L10001] int ldv_retval_0 ; [L10002] int ldv_retval_6 ; [L10003] int ldv_retval_1 ; [L10010] int ldv_retval_4 ; [L10012] int ldv_retval_8 ; [L10013] int ldv_retval_3 ; [L10014] int ldv_retval_7 ; [L10462] Element set_impl[15] ; [L10463] int last_index = 0; [L10597] Set LDV_SKBS ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10047] u32 ldvarg1 ; [L10048] u32 tmp ; [L10049] u16 ldvarg4 ; [L10050] u16 tmp___0 ; [L10051] u8 ldvarg3 ; [L10052] u8 tmp___1 ; [L10053] struct mwifiex_fw_image *ldvarg0 ; [L10054] void *tmp___2 ; [L10055] struct mwifiex_tx_param *ldvarg2 ; [L10056] void *tmp___3 ; [L10057] struct sdio_device_id *ldvarg5 ; [L10058] void *tmp___4 ; [L10059] struct work_struct *ldvarg6 ; [L10060] void *tmp___5 ; [L10061] int tmp___6 ; [L10062] int tmp___7 ; [L10063] int tmp___8 ; [L10064] int tmp___9 ; [L10065] int tmp___10 ; [L10066] int tmp___11 ; [L10068] tmp = __VERIFIER_nondet_u32() [L10069] ldvarg1 = tmp [L10070] tmp___0 = __VERIFIER_nondet_u16() [L10071] ldvarg4 = tmp___0 [L10072] tmp___1 = __VERIFIER_nondet_u8() [L10073] ldvarg3 = tmp___1 [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10074] tmp___2 = ldv_zalloc(32UL) [L10075] ldvarg0 = (struct mwifiex_fw_image *)tmp___2 [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10076] tmp___3 = ldv_zalloc(4UL) [L10077] ldvarg2 = (struct mwifiex_tx_param *)tmp___3 [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10078] tmp___4 = ldv_zalloc(16UL) [L10079] ldvarg5 = (struct sdio_device_id *)tmp___4 [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10080] tmp___5 = ldv_zalloc(80UL) [L10081] ldvarg6 = (struct work_struct *)tmp___5 [L10468] set = set_impl [L10469] last_index = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10083] ldv_state_variable_4 = 0 [L10084] ldv_state_variable_1 = 0 [L10085] ref_cnt = 0 [L10086] ldv_state_variable_0 = 1 [L10087] ldv_state_variable_3 = 0 [L10088] ldv_state_variable_2 = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: [L10324] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10325] COND TRUE ldv_state_variable_0 == 1 [L9975] int tmp ; [L7459] struct lock_class_key __key ; [L7460] struct semaphore __constr_expr_0 ; [L7462] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7463] __constr_expr_0.lock.magic = 3735899821U [L7464] __constr_expr_0.lock.owner_cpu = 4294967295U [L7465] __constr_expr_0.lock.owner = (void *)-1 [L7466] __constr_expr_0.lock.dep_map.key = 0 [L7467] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7468] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7469] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7470] __constr_expr_0.lock.dep_map.cpu = 0 [L7471] __constr_expr_0.lock.dep_map.ip = 0UL [L7472] __constr_expr_0.count = (unsigned int )val [L7473] __constr_expr_0.wait_list.next = & sem->wait_list [L7474] __constr_expr_0.wait_list.prev = & sem->wait_list [L7475] *sem = __constr_expr_0 [L7477] return; [L7477] return; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9978] user_rmmod = 0U [L10826] return __VERIFIER_nondet_int(); [L9979] tmp = sdio_register_driver(& mwifiex_sdio) [L9980] return (tmp); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10326] ldv_retval_7 = mwifiex_sdio_init_module() [L10327] COND FALSE !(ldv_retval_7 != 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10332] COND TRUE ldv_retval_7 == 0 [L10333] ldv_state_variable_0 = 2 [L10334] ldv_state_variable_2 = 1 [L10335] ldv_state_variable_3 = 1 [L10029] void *tmp ; [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10031] tmp = ldv_zalloc(1488UL) [L10032] mwifiex_sdio_group0 = (struct sdio_func *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10337] ldv_state_variable_1 = 1 [L10017] void *tmp ; [L10018] void *tmp___0 ; [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10020] tmp = ldv_zalloc(6864UL) [L10021] sdio_ops_group0 = (struct mwifiex_adapter *)tmp [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10022] tmp___0 = ldv_zalloc(232UL) [L10023] sdio_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10339] ldv_state_variable_4 = 1 [L10038] void *tmp ; [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10040] tmp = ldv_zalloc(1416UL) [L10041] mwifiex_sdio_pm_ops_group1 = (struct device *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10183] COND TRUE ldv_state_variable_1 != 0 [L10184] tmp___8 = __VERIFIER_nondet_int() [L10186] case 0: [L10193] case 1: [L10200] case 2: [L10207] case 3: [L10214] case 4: [L10221] case 5: [L10228] case 6: [L10235] case 7: [L10242] case 8: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10243] COND TRUE ldv_state_variable_1 == 1 [L9125] struct sdio_mmc_card *card ; [L9126] struct mwifiex_sdio_card_reg const *reg ; [L9127] int ret ; [L9128] u8 sdio_ireg ; [L9129] struct sk_buff *skb ; [L9130] u8 port ; [L9131] u32 len_reg_l ; [L9132] u32 len_reg_u ; [L9133] u32 rx_blocks ; [L9134] u16 rx_len ; [L9135] unsigned long flags ; [L9136] u32 bitmap ; [L9137] u8 cr ; [L9138] raw_spinlock_t *tmp ; [L9139] u32 pkt_type ; [L9140] int tmp___0 ; [L9141] struct _ddebug descriptor ; [L9142] long tmp___1 ; [L9143] struct _ddebug descriptor___0 ; [L9144] long tmp___2 ; [L9145] struct _ddebug descriptor___1 ; [L9146] long tmp___3 ; [L9147] struct _ddebug descriptor___2 ; [L9148] long tmp___4 ; [L9149] struct _ddebug descriptor___3 ; [L9150] long tmp___5 ; [L9151] struct _ddebug descriptor___4 ; [L9152] long tmp___6 ; [L9153] struct _ddebug descriptor___5 ; [L9154] long tmp___7 ; [L9155] int tmp___8 ; [L9156] struct _ddebug descriptor___6 ; [L9157] long tmp___9 ; [L9158] int tmp___10 ; [L9159] struct _ddebug descriptor___7 ; [L9160] long tmp___11 ; [L9161] int tmp___12 ; [L9162] struct _ddebug descriptor___8 ; [L9163] long tmp___13 ; [L9164] int tmp___14 ; [L9166] EXPR adapter->card [L9166] card = (struct sdio_mmc_card *)adapter->card [L9167] EXPR card->reg [L9167] reg = card->reg [L9168] ret = 0 [L9169] port = 0U [L7253] return (& lock->ldv_6338.rlock); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9170] tmp = spinlock_check(& adapter->int_lock) [L10693] return __VERIFIER_nondet_ulong(); [L9171] flags = _raw_spin_lock_irqsave(tmp) [L9172] EXPR adapter->int_status [L9172] sdio_ireg = adapter->int_status [L9173] adapter->int_status = 0U [L9175] COND FALSE !((unsigned int )sdio_ireg == 0U) [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9179] EXPR adapter->cmd_sent [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9179] COND TRUE (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9180] adapter->cmd_sent = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9183] COND TRUE ((unsigned int )sdio_ireg & 64U) != 0U [L9184] EXPR card->mp_regs [L9184] EXPR card->mp_regs + 181UL [L9184] rx_len = (int )((u16 )*(card->mp_regs + 181UL)) << 8U [L9185] EXPR card->mp_regs [L9185] EXPR card->mp_regs + 180UL [L9185] rx_len = (int )((u16 )*(card->mp_regs + 180UL)) | (int )rx_len [L9186] rx_blocks = (u32 )(((int )rx_len + 255) / 256) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9187] COND FALSE !((unsigned int )rx_len <= 4U || rx_blocks * 256U > 4096U) [L9191] rx_len = (unsigned int )((unsigned short )rx_blocks) * 256U [L10455] struct sk_buff *tmp ; [L10600] void *skb ; [L10601] void *tmp___7 ; [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND FALSE !(tmp___0 != 0) [L7390] tmp = calloc(1UL, size) [L7391] p = tmp [L7361] COND FALSE !(!cond) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L7393] return (p); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10603] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L10604] skb = (struct sk_buff___0 *)tmp___7 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10605] COND FALSE !(! skb) [L10476] int i ; [L10478] i = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10479] COND TRUE 1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10480] COND FALSE !(i < last_index) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10490] COND TRUE last_index < 15 [L10491] set_impl[last_index] = e [L10492] last_index = last_index + 1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10609] return (skb); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10457] tmp = ldv_skb_alloc() [L10458] return (tmp); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9192] skb = ldv_dev_alloc_skb_14((unsigned int )rx_len) [L9193] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) [L10857] EXPR arg0->data [L10857] EXPR arg0->tail [L10857] unsigned char *ret_val = arg0->data + arg0->tail; [L10858] EXPR arg0->tail [L10858] arg0->tail += arg1 [L10859] return ret_val; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9198] EXPR skb->data [L9198] EXPR skb->len [L9199] EXPR adapter->ioport [L8505] int ret ; [L8506] u32 nb ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L8508] COND TRUE (unsigned long )buffer == (unsigned long )((u8 *)0U) [L8509] adapter->dev [L8510] return (-1); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9198-L9199] tmp___0 = mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) [L9200] COND TRUE tmp___0 != 0 [L9201] adapter->dev [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] card->func [L7920] EXPR card->func [L10818] return __VERIFIER_nondet_uchar(); [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] card->func [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9368] tmp___10 = mwifiex_read_reg(adapter, 0U, & cr) [L9369] COND TRUE tmp___10 != 0 [L9370] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9385] EXPR \read(cr) [L7901] struct sdio_mmc_card *card ; [L7902] int ret ; [L7904] EXPR adapter->card [L7904] card = (struct sdio_mmc_card *)adapter->card [L7905] card->func [L7906] EXPR card->func [L7892] int ret ; [L7894] ret = -1 [L7896] EXPR \read(ret) [L7896] return (ret); [L7896] return (ret); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L7906] ret = mwifiex_write_reg_locked(card->func, reg, (int )data) [L7907] card->func [L7908] return (ret); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9385] tmp___12 = mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) [L9386] COND TRUE tmp___12 != 0 [L9387] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] card->func [L7920] EXPR card->func [L10818] return __VERIFIER_nondet_uchar(); [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] card->func [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9401] tmp___14 = mwifiex_read_reg(adapter, 0U, & cr) [L9402] COND TRUE tmp___14 != 0 [L9403] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10245] ldv_state_variable_1 = 1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=0] [L10317] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L9985] int tmp ; [L10712] return __VERIFIER_nondet_int(); [L9987] tmp = down_interruptible(& add_remove_card_sem) [L9988] COND TRUE tmp == 0 [L9992] user_rmmod = 1U [L10700] return __VERIFIER_nondet_bool(); [L10319] ldv_state_variable_0 = 3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=1] [L10667] int tmp___7 ; [L10558] return (last_index == 0); VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=1] [L10669] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L10670] COND FALSE !(\read(tmp___7)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=1] [L7417] reach_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953459:137438953477}, add_remove_card_sem={369:0}, card_reset_work={253:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={62:0}, mwifiex_reg_sd87xx={206:0}, mwifiex_reg_sd8897={154:0}, mwifiex_sdio={201:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={254:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={171:0}, mwifiex_sdio_sd8787={396:0}, mwifiex_sdio_sd8797={109:0}, mwifiex_sdio_sd8897={208:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={402:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={360:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 1260 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 42.2s, OverallIterations: 6, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 14.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 13159 SDtfs, 33526 SDslu, 38945 SDs, 0 SdLazy, 715 SolverSat, 64 SolverUnsat, 2 SolverUnknown, 0 SolverNotchecked, 8.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 55 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 164 ImplicationChecksByTransitivity, 4.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4845occurred in iteration=2, InterpolantAutomatonStates: 41, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 5 MinimizatonAttempts, 19436 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 18.3s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 394 NumberOfCodeBlocks, 394 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 279 ConstructedInterpolants, 0 QuantifiedInterpolants, 509 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 27/27 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-06 14:46:48,685 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-173e394 [2021-11-06 14:46:50,312 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-06 14:46:50,313 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-06 14:46:50,346 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-06 14:46:50,346 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-06 14:46:50,349 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-06 14:46:50,351 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-06 14:46:50,355 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-06 14:46:50,357 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-06 14:46:50,364 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-06 14:46:50,365 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-06 14:46:50,366 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-06 14:46:50,366 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-06 14:46:50,368 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-06 14:46:50,369 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-06 14:46:50,372 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-06 14:46:50,373 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-06 14:46:50,373 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-06 14:46:50,376 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-06 14:46:50,381 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-06 14:46:50,382 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-06 14:46:50,383 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-06 14:46:50,383 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-06 14:46:50,386 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-06 14:46:50,391 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-06 14:46:50,391 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-06 14:46:50,392 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-06 14:46:50,393 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-06 14:46:50,393 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-06 14:46:50,394 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-06 14:46:50,394 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-06 14:46:50,394 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-06 14:46:50,395 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-06 14:46:50,396 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-06 14:46:50,397 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-06 14:46:50,397 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-06 14:46:50,397 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-06 14:46:50,397 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-06 14:46:50,397 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-06 14:46:50,398 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-06 14:46:50,399 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-06 14:46:50,400 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-06 14:46:50,434 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-06 14:46:50,434 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-06 14:46:50,434 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-06 14:46:50,434 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-06 14:46:50,436 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-06 14:46:50,436 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-06 14:46:50,436 INFO L138 SettingsManager]: * Use SBE=true [2021-11-06 14:46:50,436 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-06 14:46:50,436 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-06 14:46:50,436 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-06 14:46:50,437 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-06 14:46:50,437 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-06 14:46:50,437 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-06 14:46:50,437 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-06 14:46:50,437 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-06 14:46:50,437 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-06 14:46:50,437 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-06 14:46:50,437 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 14:46:50,438 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-06 14:46:50,438 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-06 14:46:50,439 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-06 14:46:50,439 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-06 14:46:50,439 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-11-06 14:46:50,725 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-06 14:46:50,749 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-06 14:46:50,751 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-06 14:46:50,752 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-06 14:46:50,753 INFO L275 PluginConnector]: CDTParser initialized [2021-11-06 14:46:50,754 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-06 14:46:50,806 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8160b3485/774788bda312494db4acc71cb6a150ae/FLAG17a7d87cd [2021-11-06 14:46:51,487 INFO L306 CDTParser]: Found 1 translation units. [2021-11-06 14:46:51,488 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-06 14:46:51,533 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8160b3485/774788bda312494db4acc71cb6a150ae/FLAG17a7d87cd [2021-11-06 14:46:51,824 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8160b3485/774788bda312494db4acc71cb6a150ae [2021-11-06 14:46:51,830 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-06 14:46:51,832 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-06 14:46:51,834 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-06 14:46:51,835 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-06 14:46:51,838 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-06 14:46:51,839 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 02:46:51" (1/1) ... [2021-11-06 14:46:51,840 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6c853e1b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:51, skipping insertion in model container [2021-11-06 14:46:51,840 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 02:46:51" (1/1) ... [2021-11-06 14:46:51,846 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-06 14:46:51,985 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-06 14:46:52,805 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-06 14:46:53,529 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 14:46:53,560 INFO L203 MainTranslator]: Completed pre-run [2021-11-06 14:46:53,658 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-06 14:46:53,868 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 14:46:53,999 INFO L208 MainTranslator]: Completed translation [2021-11-06 14:46:54,000 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54 WrapperNode [2021-11-06 14:46:54,000 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-06 14:46:54,002 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-06 14:46:54,002 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-06 14:46:54,002 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-06 14:46:54,007 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,063 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,312 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-06 14:46:54,313 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-06 14:46:54,313 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-06 14:46:54,313 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-06 14:46:54,320 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,320 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,444 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,444 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,610 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,642 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,669 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,714 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-06 14:46:54,715 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-06 14:46:54,716 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-06 14:46:54,716 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-06 14:46:54,717 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (1/1) ... [2021-11-06 14:46:54,756 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 14:46:54,765 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-06 14:46:54,785 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-06 14:46:54,811 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-06 14:46:54,819 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-06 14:46:54,820 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-06 14:46:54,820 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-06 14:46:54,820 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-06 14:46:54,821 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-06 14:46:54,822 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-06 14:46:54,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-06 14:46:54,824 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-06 14:46:54,824 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-06 14:46:54,824 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-06 14:47:48,756 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-06 14:47:48,757 INFO L299 CfgBuilder]: Removed 1011 assume(true) statements. [2021-11-06 14:47:48,760 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 02:47:48 BoogieIcfgContainer [2021-11-06 14:47:48,760 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-06 14:47:48,762 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-06 14:47:48,762 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-06 14:47:48,764 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-06 14:47:48,765 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 02:46:51" (1/3) ... [2021-11-06 14:47:48,765 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@376e07bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 02:47:48, skipping insertion in model container [2021-11-06 14:47:48,765 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 02:46:54" (2/3) ... [2021-11-06 14:47:48,766 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@376e07bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 02:47:48, skipping insertion in model container [2021-11-06 14:47:48,766 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 02:47:48" (3/3) ... [2021-11-06 14:47:48,768 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-06 14:47:48,772 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-06 14:47:48,773 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-06 14:47:48,819 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-06 14:47:48,822 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-06 14:47:48,823 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-06 14:47:48,846 INFO L276 IsEmpty]: Start isEmpty. Operand has 1260 states, 1258 states have (on average 1.4483306836248013) internal successors, (1822), 1259 states have internal predecessors, (1822), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:47:48,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-11-06 14:47:48,853 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:47:48,853 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:47:48,854 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:47:48,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:47:48,858 INFO L85 PathProgramCache]: Analyzing trace with hash -934490734, now seen corresponding path program 1 times [2021-11-06 14:47:48,872 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 14:47:48,873 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [522852836] [2021-11-06 14:47:48,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:47:48,874 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 14:47:48,874 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 14:47:48,879 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 14:47:48,890 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-06 14:47:54,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:47:54,452 INFO L263 TraceCheckSpWp]: Trace formula consists of 1656 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 14:47:54,457 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 14:47:54,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:47:54,672 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 14:47:54,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:47:54,858 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 14:47:54,859 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [522852836] [2021-11-06 14:47:54,859 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [522852836] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 14:47:54,859 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:47:54,859 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-06 14:47:54,860 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098981991] [2021-11-06 14:47:54,863 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-06 14:47:54,864 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 14:47:54,871 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-06 14:47:54,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-06 14:47:54,876 INFO L87 Difference]: Start difference. First operand has 1260 states, 1258 states have (on average 1.4483306836248013) internal successors, (1822), 1259 states have internal predecessors, (1822), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:47:59,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:47:59,732 INFO L93 Difference]: Finished difference Result 4905 states and 7113 transitions. [2021-11-06 14:47:59,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-06 14:47:59,733 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-11-06 14:47:59,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:47:59,754 INFO L225 Difference]: With dead ends: 4905 [2021-11-06 14:47:59,755 INFO L226 Difference]: Without dead ends: 3628 [2021-11-06 14:47:59,764 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-06 14:47:59,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3628 states. [2021-11-06 14:47:59,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3628 to 3628. [2021-11-06 14:47:59,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3628 states, 3627 states have (on average 1.4320374965536256) internal successors, (5194), 3627 states have internal predecessors, (5194), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:47:59,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3628 states to 3628 states and 5194 transitions. [2021-11-06 14:47:59,915 INFO L78 Accepts]: Start accepts. Automaton has 3628 states and 5194 transitions. Word has length 27 [2021-11-06 14:47:59,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:47:59,915 INFO L470 AbstractCegarLoop]: Abstraction has 3628 states and 5194 transitions. [2021-11-06 14:47:59,916 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:47:59,916 INFO L276 IsEmpty]: Start isEmpty. Operand 3628 states and 5194 transitions. [2021-11-06 14:47:59,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-11-06 14:47:59,923 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:47:59,923 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:47:59,974 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2021-11-06 14:48:00,132 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 14:48:00,133 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:48:00,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:48:00,133 INFO L85 PathProgramCache]: Analyzing trace with hash 275680403, now seen corresponding path program 1 times [2021-11-06 14:48:00,139 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 14:48:00,140 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [492831143] [2021-11-06 14:48:00,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:48:00,140 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 14:48:00,140 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 14:48:00,143 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 14:48:00,150 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-06 14:48:05,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:48:05,666 INFO L263 TraceCheckSpWp]: Trace formula consists of 1722 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-06 14:48:05,668 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 14:48:06,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:48:06,078 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 14:48:06,461 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:48:06,461 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 14:48:06,461 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [492831143] [2021-11-06 14:48:06,462 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [492831143] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 14:48:06,462 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:48:06,462 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 7 [2021-11-06 14:48:06,462 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546129894] [2021-11-06 14:48:06,464 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-06 14:48:06,464 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 14:48:06,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-06 14:48:06,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-06 14:48:06,471 INFO L87 Difference]: Start difference. First operand 3628 states and 5194 transitions. Second operand has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 7 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:07,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:48:07,410 INFO L93 Difference]: Finished difference Result 10836 states and 15527 transitions. [2021-11-06 14:48:07,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-06 14:48:07,410 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 7 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2021-11-06 14:48:07,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:48:07,436 INFO L225 Difference]: With dead ends: 10836 [2021-11-06 14:48:07,436 INFO L226 Difference]: Without dead ends: 7223 [2021-11-06 14:48:07,445 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2021-11-06 14:48:07,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7223 states. [2021-11-06 14:48:07,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7223 to 7223. [2021-11-06 14:48:07,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7223 states, 7222 states have (on average 1.4321517585156467) internal successors, (10343), 7222 states have internal predecessors, (10343), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:07,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7223 states to 7223 states and 10343 transitions. [2021-11-06 14:48:07,621 INFO L78 Accepts]: Start accepts. Automaton has 7223 states and 10343 transitions. Word has length 28 [2021-11-06 14:48:07,621 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:48:07,621 INFO L470 AbstractCegarLoop]: Abstraction has 7223 states and 10343 transitions. [2021-11-06 14:48:07,621 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 7 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:07,621 INFO L276 IsEmpty]: Start isEmpty. Operand 7223 states and 10343 transitions. [2021-11-06 14:48:07,628 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-06 14:48:07,628 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:48:07,628 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:48:07,671 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-06 14:48:07,843 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 14:48:07,843 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:48:07,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:48:07,844 INFO L85 PathProgramCache]: Analyzing trace with hash -989906930, now seen corresponding path program 1 times [2021-11-06 14:48:07,849 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 14:48:07,849 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [664561419] [2021-11-06 14:48:07,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:48:07,849 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 14:48:07,850 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 14:48:07,865 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 14:48:07,870 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-06 14:48:13,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:48:13,525 INFO L263 TraceCheckSpWp]: Trace formula consists of 1898 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 14:48:13,529 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 14:48:13,968 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:48:13,969 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 14:48:14,411 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 14:48:14,412 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 14:48:14,412 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [664561419] [2021-11-06 14:48:14,412 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [664561419] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 14:48:14,412 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:48:14,412 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-06 14:48:14,412 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [405860085] [2021-11-06 14:48:14,413 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 14:48:14,413 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 14:48:14,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 14:48:14,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 14:48:14,413 INFO L87 Difference]: Start difference. First operand 7223 states and 10343 transitions. Second operand has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:18,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:48:18,343 INFO L93 Difference]: Finished difference Result 12984 states and 18632 transitions. [2021-11-06 14:48:18,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 14:48:18,344 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2021-11-06 14:48:18,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:48:18,362 INFO L225 Difference]: With dead ends: 12984 [2021-11-06 14:48:18,362 INFO L226 Difference]: Without dead ends: 5784 [2021-11-06 14:48:18,373 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 14:48:18,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5784 states. [2021-11-06 14:48:18,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5784 to 5581. [2021-11-06 14:48:18,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5581 states, 5580 states have (on average 1.4370967741935483) internal successors, (8019), 5580 states have internal predecessors, (8019), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:18,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5581 states to 5581 states and 8019 transitions. [2021-11-06 14:48:18,509 INFO L78 Accepts]: Start accepts. Automaton has 5581 states and 8019 transitions. Word has length 60 [2021-11-06 14:48:18,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:48:18,509 INFO L470 AbstractCegarLoop]: Abstraction has 5581 states and 8019 transitions. [2021-11-06 14:48:18,510 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:18,510 INFO L276 IsEmpty]: Start isEmpty. Operand 5581 states and 8019 transitions. [2021-11-06 14:48:18,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2021-11-06 14:48:18,516 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:48:18,516 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:48:18,563 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-06 14:48:18,731 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 14:48:18,731 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:48:18,732 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:48:18,732 INFO L85 PathProgramCache]: Analyzing trace with hash 1863411823, now seen corresponding path program 1 times [2021-11-06 14:48:18,736 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 14:48:18,736 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1538483517] [2021-11-06 14:48:18,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:48:18,737 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 14:48:18,737 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 14:48:18,738 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 14:48:18,740 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-06 14:48:24,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:48:24,433 INFO L263 TraceCheckSpWp]: Trace formula consists of 1972 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-06 14:48:24,437 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 14:48:24,960 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-06 14:48:24,961 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 14:48:25,337 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-06 14:48:25,337 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 14:48:25,337 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1538483517] [2021-11-06 14:48:25,337 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1538483517] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 14:48:25,338 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:48:25,338 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2021-11-06 14:48:25,338 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1882884084] [2021-11-06 14:48:25,338 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-06 14:48:25,338 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 14:48:25,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-06 14:48:25,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-06 14:48:25,339 INFO L87 Difference]: Start difference. First operand 5581 states and 8019 transitions. Second operand has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:26,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:48:26,445 INFO L93 Difference]: Finished difference Result 25799 states and 37098 transitions. [2021-11-06 14:48:26,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-06 14:48:26,446 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 83 [2021-11-06 14:48:26,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:48:26,516 INFO L225 Difference]: With dead ends: 25799 [2021-11-06 14:48:26,517 INFO L226 Difference]: Without dead ends: 20422 [2021-11-06 14:48:26,534 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 163 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-06 14:48:26,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20422 states. [2021-11-06 14:48:26,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20422 to 5597. [2021-11-06 14:48:26,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5597 states, 5596 states have (on average 1.4358470335954252) internal successors, (8035), 5596 states have internal predecessors, (8035), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:26,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5597 states to 5597 states and 8035 transitions. [2021-11-06 14:48:26,787 INFO L78 Accepts]: Start accepts. Automaton has 5597 states and 8035 transitions. Word has length 83 [2021-11-06 14:48:26,788 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:48:26,788 INFO L470 AbstractCegarLoop]: Abstraction has 5597 states and 8035 transitions. [2021-11-06 14:48:26,788 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:26,788 INFO L276 IsEmpty]: Start isEmpty. Operand 5597 states and 8035 transitions. [2021-11-06 14:48:26,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2021-11-06 14:48:26,794 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:48:26,796 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:48:26,844 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-06 14:48:27,011 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 14:48:27,011 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:48:27,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:48:27,012 INFO L85 PathProgramCache]: Analyzing trace with hash -934608745, now seen corresponding path program 1 times [2021-11-06 14:48:27,016 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 14:48:27,016 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [605748961] [2021-11-06 14:48:27,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:48:27,017 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 14:48:27,017 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 14:48:27,019 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 14:48:27,020 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-06 14:48:32,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 14:48:32,756 INFO L263 TraceCheckSpWp]: Trace formula consists of 1991 conjuncts, 18 conjunts are in the unsatisfiable core [2021-11-06 14:48:32,759 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 14:48:33,938 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-06 14:48:33,938 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 14:48:34,548 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-06 14:48:34,549 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 14:48:34,549 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [605748961] [2021-11-06 14:48:34,549 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [605748961] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 14:48:34,549 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 14:48:34,549 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9, 9] imperfect sequences [] total 10 [2021-11-06 14:48:34,549 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976104071] [2021-11-06 14:48:34,550 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-06 14:48:34,550 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 14:48:34,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-06 14:48:34,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-11-06 14:48:34,551 INFO L87 Difference]: Start difference. First operand 5597 states and 8035 transitions. Second operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 10 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:53,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 14:48:53,176 INFO L93 Difference]: Finished difference Result 40719 states and 58448 transitions. [2021-11-06 14:48:53,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-06 14:48:53,178 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 10 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 86 [2021-11-06 14:48:53,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 14:48:53,260 INFO L225 Difference]: With dead ends: 40719 [2021-11-06 14:48:53,260 INFO L226 Difference]: Without dead ends: 35326 [2021-11-06 14:48:53,281 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 168 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 6.4s TimeCoverageRelationStatistics Valid=208, Invalid=494, Unknown=0, NotChecked=0, Total=702 [2021-11-06 14:48:53,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35326 states. [2021-11-06 14:48:53,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35326 to 5621. [2021-11-06 14:48:53,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5621 states, 5620 states have (on average 1.4325622775800713) internal successors, (8051), 5620 states have internal predecessors, (8051), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:53,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5621 states to 5621 states and 8051 transitions. [2021-11-06 14:48:53,710 INFO L78 Accepts]: Start accepts. Automaton has 5621 states and 8051 transitions. Word has length 86 [2021-11-06 14:48:53,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 14:48:53,711 INFO L470 AbstractCegarLoop]: Abstraction has 5621 states and 8051 transitions. [2021-11-06 14:48:53,712 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 10 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 14:48:53,712 INFO L276 IsEmpty]: Start isEmpty. Operand 5621 states and 8051 transitions. [2021-11-06 14:48:53,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2021-11-06 14:48:53,720 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 14:48:53,720 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 14:48:53,771 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-06 14:48:53,947 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 14:48:53,947 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-06 14:48:53,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 14:48:53,948 INFO L85 PathProgramCache]: Analyzing trace with hash -723596056, now seen corresponding path program 1 times [2021-11-06 14:48:53,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 14:48:53,952 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1444475709] [2021-11-06 14:48:53,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 14:48:53,952 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 14:48:53,953 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 14:48:53,953 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 14:48:53,954 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process Killed by 15