./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0f8a17c6 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 00:58:08,995 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 00:58:09,002 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 00:58:09,063 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 00:58:09,064 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 00:58:09,065 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 00:58:09,066 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 00:58:09,068 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 00:58:09,070 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 00:58:09,071 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 00:58:09,072 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 00:58:09,074 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 00:58:09,075 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 00:58:09,078 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 00:58:09,080 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 00:58:09,081 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 00:58:09,086 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 00:58:09,091 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 00:58:09,092 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 00:58:09,096 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 00:58:09,097 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 00:58:09,101 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 00:58:09,102 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 00:58:09,103 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 00:58:09,105 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 00:58:09,107 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 00:58:09,107 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 00:58:09,108 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 00:58:09,109 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 00:58:09,110 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 00:58:09,110 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 00:58:09,111 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 00:58:09,112 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 00:58:09,113 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 00:58:09,114 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 00:58:09,115 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 00:58:09,115 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 00:58:09,115 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 00:58:09,115 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 00:58:09,116 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 00:58:09,117 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 00:58:09,118 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-17 00:58:09,149 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 00:58:09,151 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 00:58:09,152 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 00:58:09,152 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 00:58:09,153 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 00:58:09,153 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 00:58:09,154 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 00:58:09,154 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 00:58:09,155 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 00:58:09,155 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 00:58:09,156 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-17 00:58:09,156 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 00:58:09,156 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 00:58:09,156 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 00:58:09,156 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 00:58:09,157 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 00:58:09,157 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 00:58:09,157 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 00:58:09,157 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 00:58:09,157 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 00:58:09,158 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 00:58:09,158 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 00:58:09,158 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 00:58:09,158 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 00:58:09,158 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 00:58:09,159 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-17 00:58:09,159 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-17 00:58:09,159 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 00:58:09,159 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 00:58:09,160 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 00:58:09,160 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 00:58:09,160 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2021-11-17 00:58:09,404 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 00:58:09,427 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 00:58:09,430 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 00:58:09,431 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 00:58:09,432 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 00:58:09,433 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:58:09,505 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e8df958e/f2573ed7029942a18174c582f7805a87/FLAG5f75a427f [2021-11-17 00:58:10,159 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 00:58:10,160 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:58:10,204 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e8df958e/f2573ed7029942a18174c582f7805a87/FLAG5f75a427f [2021-11-17 00:58:10,306 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e8df958e/f2573ed7029942a18174c582f7805a87 [2021-11-17 00:58:10,307 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 00:58:10,308 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 00:58:10,309 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 00:58:10,309 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 00:58:10,312 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 00:58:10,313 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 12:58:10" (1/1) ... [2021-11-17 00:58:10,314 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2161ed7c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:10, skipping insertion in model container [2021-11-17 00:58:10,314 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 12:58:10" (1/1) ... [2021-11-17 00:58:10,319 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 00:58:10,433 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 00:58:11,158 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-17 00:58:11,627 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 00:58:11,652 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 00:58:11,829 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-17 00:58:11,938 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 00:58:12,037 INFO L208 MainTranslator]: Completed translation [2021-11-17 00:58:12,039 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12 WrapperNode [2021-11-17 00:58:12,039 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 00:58:12,041 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 00:58:12,041 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 00:58:12,041 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 00:58:12,047 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,106 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,202 INFO L137 Inliner]: procedures = 157, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2332 [2021-11-17 00:58:12,203 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 00:58:12,204 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 00:58:12,204 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 00:58:12,204 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 00:58:12,212 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,212 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,235 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,238 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,355 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,365 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,390 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,406 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 00:58:12,407 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 00:58:12,407 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 00:58:12,407 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 00:58:12,408 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (1/1) ... [2021-11-17 00:58:12,414 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 00:58:12,423 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:58:12,436 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 00:58:12,445 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 00:58:12,471 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-17 00:58:12,471 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-17 00:58:12,471 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-17 00:58:12,472 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-17 00:58:12,472 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-17 00:58:12,472 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2021-11-17 00:58:12,472 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2021-11-17 00:58:12,472 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2021-11-17 00:58:12,472 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2021-11-17 00:58:12,472 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2021-11-17 00:58:12,473 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2021-11-17 00:58:12,473 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 00:58:12,473 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 00:58:12,473 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-17 00:58:12,473 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-17 00:58:12,473 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 00:58:12,473 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 00:58:12,474 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-17 00:58:12,474 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 00:58:12,474 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 00:58:12,474 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-17 00:58:12,474 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-17 00:58:12,474 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-17 00:58:12,474 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-17 00:58:12,475 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 00:58:12,475 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 00:58:12,475 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 00:58:12,475 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 00:58:12,475 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 00:58:12,475 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 00:58:12,483 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 00:58:12,483 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 00:58:12,484 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-17 00:58:12,484 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-17 00:58:12,484 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-17 00:58:12,484 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-17 00:58:12,484 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-17 00:58:12,485 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-17 00:58:12,485 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 00:58:12,485 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 00:58:12,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-17 00:58:12,485 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2021-11-17 00:58:12,485 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2021-11-17 00:58:12,486 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 00:58:12,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 00:58:12,486 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-17 00:58:12,486 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-17 00:58:12,487 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 00:58:12,487 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 00:58:12,487 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-17 00:58:12,487 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-17 00:58:12,487 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 00:58:12,487 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 00:58:12,487 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 00:58:12,488 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 00:58:12,488 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 00:58:12,489 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-17 00:58:12,489 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-17 00:58:12,490 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 00:58:12,490 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-17 00:58:12,491 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-17 00:58:12,491 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 00:58:12,491 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 00:58:12,491 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-17 00:58:12,492 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-17 00:58:12,492 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 00:58:12,492 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-17 00:58:12,492 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-17 00:58:12,492 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-17 00:58:12,492 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-17 00:58:12,493 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-17 00:58:12,493 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-17 00:58:12,493 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 00:58:12,494 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 00:58:12,494 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-17 00:58:12,494 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-17 00:58:12,494 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2021-11-17 00:58:12,494 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2021-11-17 00:58:12,494 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-17 00:58:12,494 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-17 00:58:12,495 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-17 00:58:12,495 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-17 00:58:12,495 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-17 00:58:12,495 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-17 00:58:12,495 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-17 00:58:12,495 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-17 00:58:12,496 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-17 00:58:12,496 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-17 00:58:12,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-17 00:58:12,496 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 00:58:12,497 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 00:58:12,497 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-17 00:58:12,497 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-17 00:58:12,932 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 00:58:12,934 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 00:58:13,070 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 00:58:16,668 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 00:58:16,685 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 00:58:16,685 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-17 00:58:16,690 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:58:16 BoogieIcfgContainer [2021-11-17 00:58:16,690 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 00:58:16,691 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 00:58:16,691 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 00:58:16,697 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 00:58:16,697 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 12:58:10" (1/3) ... [2021-11-17 00:58:16,698 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@652b8591 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 12:58:16, skipping insertion in model container [2021-11-17 00:58:16,699 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:58:12" (2/3) ... [2021-11-17 00:58:16,699 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@652b8591 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 12:58:16, skipping insertion in model container [2021-11-17 00:58:16,699 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:58:16" (3/3) ... [2021-11-17 00:58:16,700 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:58:16,707 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 00:58:16,708 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 00:58:16,759 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 00:58:16,774 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 00:58:16,775 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 00:58:16,814 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2021-11-17 00:58:16,828 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-11-17 00:58:16,829 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:58:16,830 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:58:16,832 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:58:16,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:58:16,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2021-11-17 00:58:16,848 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:58:16,849 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376648291] [2021-11-17 00:58:16,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:58:16,850 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:58:17,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:17,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:58:17,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:17,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:58:17,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:17,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:58:17,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:17,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:58:17,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:17,414 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 00:58:17,415 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:58:17,415 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376648291] [2021-11-17 00:58:17,416 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376648291] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:58:17,416 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:58:17,416 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 00:58:17,419 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103307470] [2021-11-17 00:58:17,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:58:17,423 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:58:17,424 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:58:17,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:58:17,452 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:58:17,455 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 00:58:19,393 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.93s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:21,768 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:23,791 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:26,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:58:26,047 INFO L93 Difference]: Finished difference Result 2121 states and 3115 transitions. [2021-11-17 00:58:26,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:58:26,049 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2021-11-17 00:58:26,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:58:26,070 INFO L225 Difference]: With dead ends: 2121 [2021-11-17 00:58:26,070 INFO L226 Difference]: Without dead ends: 1432 [2021-11-17 00:58:26,081 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:58:26,083 INFO L933 BasicCegarLoop]: 1045 mSDtfsCounter, 1384 mSDsluCounter, 1778 mSDsCounter, 0 mSdLazyCounter, 964 mSolverCounterSat, 685 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1493 SdHoareTripleChecker+Valid, 2823 SdHoareTripleChecker+Invalid, 1651 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 685 IncrementalHoareTripleChecker+Valid, 964 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.4s IncrementalHoareTripleChecker+Time [2021-11-17 00:58:26,084 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1493 Valid, 2823 Invalid, 1651 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [685 Valid, 964 Invalid, 2 Unknown, 0 Unchecked, 8.4s Time] [2021-11-17 00:58:26,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1432 states. [2021-11-17 00:58:26,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1432 to 1286. [2021-11-17 00:58:26,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1286 states, 957 states have (on average 1.3657262277951934) internal successors, (1307), 971 states have internal predecessors, (1307), 256 states have call successors, (256), 73 states have call predecessors, (256), 72 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2021-11-17 00:58:26,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1286 states to 1286 states and 1818 transitions. [2021-11-17 00:58:26,249 INFO L78 Accepts]: Start accepts. Automaton has 1286 states and 1818 transitions. Word has length 45 [2021-11-17 00:58:26,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:58:26,249 INFO L470 AbstractCegarLoop]: Abstraction has 1286 states and 1818 transitions. [2021-11-17 00:58:26,250 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 00:58:26,250 INFO L276 IsEmpty]: Start isEmpty. Operand 1286 states and 1818 transitions. [2021-11-17 00:58:26,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-17 00:58:26,254 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:58:26,255 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:58:26,255 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-17 00:58:26,255 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:58:26,256 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:58:26,256 INFO L85 PathProgramCache]: Analyzing trace with hash -1828543170, now seen corresponding path program 1 times [2021-11-17 00:58:26,256 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:58:26,256 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1241999807] [2021-11-17 00:58:26,257 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:58:26,257 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:58:26,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:26,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:58:26,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:26,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:58:26,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:26,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:58:26,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:26,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:58:26,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:26,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-17 00:58:26,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:26,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-17 00:58:26,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:26,578 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-17 00:58:26,578 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:58:26,579 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1241999807] [2021-11-17 00:58:26,579 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1241999807] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:58:26,579 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:58:26,579 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-17 00:58:26,579 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [552352812] [2021-11-17 00:58:26,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:58:26,581 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-17 00:58:26,581 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:58:26,581 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-17 00:58:26,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:58:26,582 INFO L87 Difference]: Start difference. First operand 1286 states and 1818 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-17 00:58:28,175 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.58s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:30,574 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:32,594 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:35,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:58:35,126 INFO L93 Difference]: Finished difference Result 4123 states and 5934 transitions. [2021-11-17 00:58:35,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-17 00:58:35,127 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2021-11-17 00:58:35,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:58:35,143 INFO L225 Difference]: With dead ends: 4123 [2021-11-17 00:58:35,143 INFO L226 Difference]: Without dead ends: 2839 [2021-11-17 00:58:35,149 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2021-11-17 00:58:35,150 INFO L933 BasicCegarLoop]: 1091 mSDtfsCounter, 1367 mSDsluCounter, 3879 mSDsCounter, 0 mSdLazyCounter, 1324 mSolverCounterSat, 662 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1473 SdHoareTripleChecker+Valid, 4970 SdHoareTripleChecker+Invalid, 1988 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 662 IncrementalHoareTripleChecker+Valid, 1324 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.3s IncrementalHoareTripleChecker+Time [2021-11-17 00:58:35,150 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1473 Valid, 4970 Invalid, 1988 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [662 Valid, 1324 Invalid, 2 Unknown, 0 Unchecked, 8.3s Time] [2021-11-17 00:58:35,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2839 states. [2021-11-17 00:58:35,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2839 to 2591. [2021-11-17 00:58:35,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2591 states, 1927 states have (on average 1.3642968344577062) internal successors, (2629), 1963 states have internal predecessors, (2629), 507 states have call successors, (507), 145 states have call predecessors, (507), 156 states have return successors, (561), 498 states have call predecessors, (561), 506 states have call successors, (561) [2021-11-17 00:58:35,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2591 states to 2591 states and 3697 transitions. [2021-11-17 00:58:35,295 INFO L78 Accepts]: Start accepts. Automaton has 2591 states and 3697 transitions. Word has length 63 [2021-11-17 00:58:35,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:58:35,296 INFO L470 AbstractCegarLoop]: Abstraction has 2591 states and 3697 transitions. [2021-11-17 00:58:35,296 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-17 00:58:35,297 INFO L276 IsEmpty]: Start isEmpty. Operand 2591 states and 3697 transitions. [2021-11-17 00:58:35,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-11-17 00:58:35,306 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:58:35,307 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:58:35,307 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-17 00:58:35,307 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:58:35,308 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:58:35,308 INFO L85 PathProgramCache]: Analyzing trace with hash -1080085425, now seen corresponding path program 1 times [2021-11-17 00:58:35,308 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:58:35,311 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2070712290] [2021-11-17 00:58:35,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:58:35,311 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:58:35,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:58:35,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:58:35,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:58:35,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:58:35,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-17 00:58:35,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:58:35,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-11-17 00:58:35,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:58:35,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:58:35,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2021-11-17 00:58:35,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 00:58:35,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:35,590 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-17 00:58:35,590 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:58:35,591 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2070712290] [2021-11-17 00:58:35,591 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2070712290] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:58:35,592 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:58:35,592 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-17 00:58:35,592 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [475085356] [2021-11-17 00:58:35,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:58:35,593 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-17 00:58:35,593 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:58:35,593 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-17 00:58:35,594 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:58:35,594 INFO L87 Difference]: Start difference. First operand 2591 states and 3697 transitions. Second operand has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-17 00:58:36,890 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.29s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:39,205 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:41,227 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:43,250 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:45,744 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:47,773 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:49,798 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:52,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:58:52,117 INFO L93 Difference]: Finished difference Result 7632 states and 10965 transitions. [2021-11-17 00:58:52,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-17 00:58:52,118 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 113 [2021-11-17 00:58:52,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:58:52,144 INFO L225 Difference]: With dead ends: 7632 [2021-11-17 00:58:52,145 INFO L226 Difference]: Without dead ends: 5053 [2021-11-17 00:58:52,154 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-17 00:58:52,155 INFO L933 BasicCegarLoop]: 1038 mSDtfsCounter, 1308 mSDsluCounter, 2366 mSDsCounter, 0 mSdLazyCounter, 1328 mSolverCounterSat, 883 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1411 SdHoareTripleChecker+Valid, 3404 SdHoareTripleChecker+Invalid, 2217 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 883 IncrementalHoareTripleChecker+Valid, 1328 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.2s IncrementalHoareTripleChecker+Time [2021-11-17 00:58:52,155 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1411 Valid, 3404 Invalid, 2217 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [883 Valid, 1328 Invalid, 6 Unknown, 0 Unchecked, 16.2s Time] [2021-11-17 00:58:52,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5053 states. [2021-11-17 00:58:52,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5053 to 4275. [2021-11-17 00:58:52,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4275 states, 3162 states have (on average 1.3488298545224542) internal successors, (4265), 3224 states have internal predecessors, (4265), 829 states have call successors, (829), 262 states have call predecessors, (829), 283 states have return successors, (918), 816 states have call predecessors, (918), 828 states have call successors, (918) [2021-11-17 00:58:52,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4275 states to 4275 states and 6012 transitions. [2021-11-17 00:58:52,338 INFO L78 Accepts]: Start accepts. Automaton has 4275 states and 6012 transitions. Word has length 113 [2021-11-17 00:58:52,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:58:52,340 INFO L470 AbstractCegarLoop]: Abstraction has 4275 states and 6012 transitions. [2021-11-17 00:58:52,340 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-17 00:58:52,340 INFO L276 IsEmpty]: Start isEmpty. Operand 4275 states and 6012 transitions. [2021-11-17 00:58:52,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2021-11-17 00:58:52,351 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:58:52,351 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:58:52,352 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-17 00:58:52,352 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:58:52,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:58:52,352 INFO L85 PathProgramCache]: Analyzing trace with hash 265725666, now seen corresponding path program 1 times [2021-11-17 00:58:52,353 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:58:52,353 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [401186646] [2021-11-17 00:58:52,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:58:52,353 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:58:52,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:58:52,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:58:52,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:58:52,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:58:52,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-17 00:58:52,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:58:52,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-11-17 00:58:52,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-17 00:58:52,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:58:52,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-17 00:58:52,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:58:52,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:58:52,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-17 00:58:52,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-11-17 00:58:52,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:58:52,601 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-11-17 00:58:52,601 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:58:52,601 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [401186646] [2021-11-17 00:58:52,601 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [401186646] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:58:52,601 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:58:52,602 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-17 00:58:52,602 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [962180429] [2021-11-17 00:58:52,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:58:52,603 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-17 00:58:52,603 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:58:52,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-17 00:58:52,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:58:52,604 INFO L87 Difference]: Start difference. First operand 4275 states and 6012 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:58:53,870 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.27s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:56,015 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:58:58,040 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:00,340 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:02,364 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:04,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:04,900 INFO L93 Difference]: Finished difference Result 10577 states and 14962 transitions. [2021-11-17 00:59:04,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-17 00:59:04,900 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 130 [2021-11-17 00:59:04,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:04,932 INFO L225 Difference]: With dead ends: 10577 [2021-11-17 00:59:04,932 INFO L226 Difference]: Without dead ends: 6318 [2021-11-17 00:59:04,949 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2021-11-17 00:59:04,951 INFO L933 BasicCegarLoop]: 1215 mSDtfsCounter, 826 mSDsluCounter, 3157 mSDsCounter, 0 mSdLazyCounter, 1208 mSolverCounterSat, 417 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 891 SdHoareTripleChecker+Valid, 4372 SdHoareTripleChecker+Invalid, 1629 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 417 IncrementalHoareTripleChecker+Valid, 1208 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:04,952 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [891 Valid, 4372 Invalid, 1629 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [417 Valid, 1208 Invalid, 4 Unknown, 0 Unchecked, 12.1s Time] [2021-11-17 00:59:04,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6318 states. [2021-11-17 00:59:05,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6318 to 5704. [2021-11-17 00:59:05,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5704 states, 4250 states have (on average 1.3538823529411765) internal successors, (5754), 4336 states have internal predecessors, (5754), 1066 states have call successors, (1066), 358 states have call predecessors, (1066), 387 states have return successors, (1183), 1041 states have call predecessors, (1183), 1065 states have call successors, (1183) [2021-11-17 00:59:05,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5704 states to 5704 states and 8003 transitions. [2021-11-17 00:59:05,152 INFO L78 Accepts]: Start accepts. Automaton has 5704 states and 8003 transitions. Word has length 130 [2021-11-17 00:59:05,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:05,153 INFO L470 AbstractCegarLoop]: Abstraction has 5704 states and 8003 transitions. [2021-11-17 00:59:05,153 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:59:05,154 INFO L276 IsEmpty]: Start isEmpty. Operand 5704 states and 8003 transitions. [2021-11-17 00:59:05,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2021-11-17 00:59:05,164 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:05,164 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:05,164 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-17 00:59:05,165 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:05,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:05,165 INFO L85 PathProgramCache]: Analyzing trace with hash -1355234686, now seen corresponding path program 1 times [2021-11-17 00:59:05,165 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:05,166 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424214784] [2021-11-17 00:59:05,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:05,166 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:05,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:05,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:05,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:05,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:05,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-17 00:59:05,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-17 00:59:05,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-17 00:59:05,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-17 00:59:05,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-17 00:59:05,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:05,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 00:59:05,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:05,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:05,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:05,587 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2021-11-17 00:59:05,587 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:05,589 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424214784] [2021-11-17 00:59:05,589 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1424214784] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:59:05,590 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:59:05,590 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-17 00:59:05,590 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090045518] [2021-11-17 00:59:05,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:59:05,591 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-17 00:59:05,591 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:05,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-17 00:59:05,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2021-11-17 00:59:05,592 INFO L87 Difference]: Start difference. First operand 5704 states and 8003 transitions. Second operand has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2021-11-17 00:59:08,549 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:10,582 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:12,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:12,674 INFO L93 Difference]: Finished difference Result 12348 states and 17757 transitions. [2021-11-17 00:59:12,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-17 00:59:12,675 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) Word has length 138 [2021-11-17 00:59:12,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:12,715 INFO L225 Difference]: With dead ends: 12348 [2021-11-17 00:59:12,715 INFO L226 Difference]: Without dead ends: 6671 [2021-11-17 00:59:12,740 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-11-17 00:59:12,743 INFO L933 BasicCegarLoop]: 898 mSDtfsCounter, 322 mSDsluCounter, 3508 mSDsCounter, 0 mSdLazyCounter, 1062 mSolverCounterSat, 348 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 4406 SdHoareTripleChecker+Invalid, 1412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 348 IncrementalHoareTripleChecker+Valid, 1062 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:12,743 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [345 Valid, 4406 Invalid, 1412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [348 Valid, 1062 Invalid, 2 Unknown, 0 Unchecked, 6.8s Time] [2021-11-17 00:59:12,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6671 states. [2021-11-17 00:59:12,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6671 to 5952. [2021-11-17 00:59:12,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5952 states, 4396 states have (on average 1.3475887170154686) internal successors, (5924), 4500 states have internal predecessors, (5924), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 413 states have return successors, (1329), 1125 states have call predecessors, (1329), 1141 states have call successors, (1329) [2021-11-17 00:59:13,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5952 states to 5952 states and 8395 transitions. [2021-11-17 00:59:13,003 INFO L78 Accepts]: Start accepts. Automaton has 5952 states and 8395 transitions. Word has length 138 [2021-11-17 00:59:13,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:13,003 INFO L470 AbstractCegarLoop]: Abstraction has 5952 states and 8395 transitions. [2021-11-17 00:59:13,004 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2021-11-17 00:59:13,005 INFO L276 IsEmpty]: Start isEmpty. Operand 5952 states and 8395 transitions. [2021-11-17 00:59:13,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 146 [2021-11-17 00:59:13,016 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:13,016 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:13,017 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-17 00:59:13,017 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:13,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:13,018 INFO L85 PathProgramCache]: Analyzing trace with hash 324022734, now seen corresponding path program 1 times [2021-11-17 00:59:13,019 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:13,019 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1316066629] [2021-11-17 00:59:13,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:13,019 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:13,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:13,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:13,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:13,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:13,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-17 00:59:13,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-17 00:59:13,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-17 00:59:13,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-17 00:59:13,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-17 00:59:13,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:13,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 00:59:13,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:13,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:13,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-17 00:59:13,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:13,459 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-11-17 00:59:13,459 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:13,459 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1316066629] [2021-11-17 00:59:13,460 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1316066629] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:59:13,460 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:59:13,460 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-11-17 00:59:13,460 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1048218945] [2021-11-17 00:59:13,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:59:13,461 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-17 00:59:13,461 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:13,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-17 00:59:13,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2021-11-17 00:59:13,462 INFO L87 Difference]: Start difference. First operand 5952 states and 8395 transitions. Second operand has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:59:14,721 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.26s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:16,853 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:18,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:18,845 INFO L93 Difference]: Finished difference Result 12600 states and 17885 transitions. [2021-11-17 00:59:18,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-17 00:59:18,846 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 145 [2021-11-17 00:59:18,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:18,883 INFO L225 Difference]: With dead ends: 12600 [2021-11-17 00:59:18,883 INFO L226 Difference]: Without dead ends: 6675 [2021-11-17 00:59:18,905 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2021-11-17 00:59:18,906 INFO L933 BasicCegarLoop]: 896 mSDtfsCounter, 429 mSDsluCounter, 5105 mSDsCounter, 0 mSdLazyCounter, 1330 mSolverCounterSat, 503 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 452 SdHoareTripleChecker+Valid, 6001 SdHoareTripleChecker+Invalid, 1834 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 503 IncrementalHoareTripleChecker+Valid, 1330 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.2s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:18,906 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [452 Valid, 6001 Invalid, 1834 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [503 Valid, 1330 Invalid, 1 Unknown, 0 Unchecked, 5.2s Time] [2021-11-17 00:59:18,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6675 states. [2021-11-17 00:59:19,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6675 to 6000. [2021-11-17 00:59:19,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6000 states, 4432 states have (on average 1.3447653429602888) internal successors, (5960), 4532 states have internal predecessors, (5960), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 425 states have return successors, (1375), 1141 states have call predecessors, (1375), 1141 states have call successors, (1375) [2021-11-17 00:59:19,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6000 states to 6000 states and 8477 transitions. [2021-11-17 00:59:19,146 INFO L78 Accepts]: Start accepts. Automaton has 6000 states and 8477 transitions. Word has length 145 [2021-11-17 00:59:19,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:19,147 INFO L470 AbstractCegarLoop]: Abstraction has 6000 states and 8477 transitions. [2021-11-17 00:59:19,147 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:59:19,147 INFO L276 IsEmpty]: Start isEmpty. Operand 6000 states and 8477 transitions. [2021-11-17 00:59:19,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-11-17 00:59:19,161 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:19,161 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:19,162 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-17 00:59:19,162 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:19,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:19,162 INFO L85 PathProgramCache]: Analyzing trace with hash -1003509590, now seen corresponding path program 1 times [2021-11-17 00:59:19,163 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:19,163 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757603293] [2021-11-17 00:59:19,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:19,163 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:19,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:19,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:19,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:19,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:19,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-17 00:59:19,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-17 00:59:19,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-17 00:59:19,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-17 00:59:19,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-17 00:59:19,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:19,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:19,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-17 00:59:19,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:19,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:19,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-17 00:59:19,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:19,625 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-17 00:59:19,626 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:19,626 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757603293] [2021-11-17 00:59:19,626 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [757603293] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:59:19,626 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:59:19,626 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 00:59:19,626 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116096063] [2021-11-17 00:59:19,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:59:19,627 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 00:59:19,627 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:19,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 00:59:19,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:59:19,628 INFO L87 Difference]: Start difference. First operand 6000 states and 8477 transitions. Second operand has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-17 00:59:20,842 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:23,031 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:25,052 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:27,076 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:28,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:28,800 INFO L93 Difference]: Finished difference Result 12649 states and 17960 transitions. [2021-11-17 00:59:28,801 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:59:28,801 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 151 [2021-11-17 00:59:28,801 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:28,827 INFO L225 Difference]: With dead ends: 12649 [2021-11-17 00:59:28,828 INFO L226 Difference]: Without dead ends: 6657 [2021-11-17 00:59:28,844 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-11-17 00:59:28,845 INFO L933 BasicCegarLoop]: 899 mSDtfsCounter, 434 mSDsluCounter, 3091 mSDsCounter, 0 mSdLazyCounter, 1111 mSolverCounterSat, 508 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 3990 SdHoareTripleChecker+Invalid, 1622 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 508 IncrementalHoareTripleChecker+Valid, 1111 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.0s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:28,845 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [457 Valid, 3990 Invalid, 1622 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [508 Valid, 1111 Invalid, 3 Unknown, 0 Unchecked, 9.0s Time] [2021-11-17 00:59:28,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6657 states. [2021-11-17 00:59:29,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6657 to 6009. [2021-11-17 00:59:29,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6009 states, 4441 states have (on average 1.3440666516550326) internal successors, (5969), 4541 states have internal predecessors, (5969), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 425 states have return successors, (1375), 1141 states have call predecessors, (1375), 1141 states have call successors, (1375) [2021-11-17 00:59:29,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6009 states to 6009 states and 8486 transitions. [2021-11-17 00:59:29,037 INFO L78 Accepts]: Start accepts. Automaton has 6009 states and 8486 transitions. Word has length 151 [2021-11-17 00:59:29,037 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:29,037 INFO L470 AbstractCegarLoop]: Abstraction has 6009 states and 8486 transitions. [2021-11-17 00:59:29,037 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-17 00:59:29,037 INFO L276 IsEmpty]: Start isEmpty. Operand 6009 states and 8486 transitions. [2021-11-17 00:59:29,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2021-11-17 00:59:29,049 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:29,049 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:29,049 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-17 00:59:29,049 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:29,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:29,050 INFO L85 PathProgramCache]: Analyzing trace with hash -671508138, now seen corresponding path program 1 times [2021-11-17 00:59:29,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:29,050 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1285053885] [2021-11-17 00:59:29,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:29,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:29,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:29,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:29,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:29,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:29,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-17 00:59:29,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-17 00:59:29,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-17 00:59:29,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-17 00:59:29,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-11-17 00:59:29,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:29,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:29,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-17 00:59:29,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:29,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:29,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-17 00:59:29,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:29,507 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-17 00:59:29,507 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:29,507 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1285053885] [2021-11-17 00:59:29,507 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1285053885] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 00:59:29,507 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1360977676] [2021-11-17 00:59:29,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:29,508 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:59:29,508 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:59:29,514 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 00:59:29,545 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-17 00:59:29,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:30,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 2013 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-17 00:59:30,014 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:59:30,362 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2021-11-17 00:59:30,362 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 00:59:30,362 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1360977676] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:59:30,362 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 00:59:30,363 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2021-11-17 00:59:30,363 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2032426631] [2021-11-17 00:59:30,363 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:59:30,363 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:59:30,364 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:30,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:59:30,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2021-11-17 00:59:30,364 INFO L87 Difference]: Start difference. First operand 6009 states and 8486 transitions. Second operand has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-17 00:59:31,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:31,538 INFO L93 Difference]: Finished difference Result 9166 states and 12912 transitions. [2021-11-17 00:59:31,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 00:59:31,539 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 152 [2021-11-17 00:59:31,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:31,548 INFO L225 Difference]: With dead ends: 9166 [2021-11-17 00:59:31,548 INFO L226 Difference]: Without dead ends: 3175 [2021-11-17 00:59:31,558 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 175 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=147, Unknown=0, NotChecked=0, Total=182 [2021-11-17 00:59:31,559 INFO L933 BasicCegarLoop]: 942 mSDtfsCounter, 24 mSDsluCounter, 2816 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 3758 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:31,559 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [24 Valid, 3758 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-17 00:59:31,563 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3175 states. [2021-11-17 00:59:31,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3175 to 3079. [2021-11-17 00:59:31,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3422553751645458) internal successors, (3059), 2329 states have internal predecessors, (3059), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2021-11-17 00:59:31,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4331 transitions. [2021-11-17 00:59:31,647 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4331 transitions. Word has length 152 [2021-11-17 00:59:31,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:31,648 INFO L470 AbstractCegarLoop]: Abstraction has 3079 states and 4331 transitions. [2021-11-17 00:59:31,648 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-17 00:59:31,648 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4331 transitions. [2021-11-17 00:59:31,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2021-11-17 00:59:31,655 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:31,655 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:31,686 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-11-17 00:59:31,879 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:59:31,880 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:31,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:31,880 INFO L85 PathProgramCache]: Analyzing trace with hash -1205243631, now seen corresponding path program 1 times [2021-11-17 00:59:31,880 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:31,880 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [165221161] [2021-11-17 00:59:31,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:31,881 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:32,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:32,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:32,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:32,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:32,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-17 00:59:32,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-17 00:59:32,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-11-17 00:59:32,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-17 00:59:32,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-11-17 00:59:32,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 00:59:32,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:32,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:32,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 00:59:32,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:32,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:32,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-17 00:59:32,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:32,371 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2021-11-17 00:59:32,371 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:32,371 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [165221161] [2021-11-17 00:59:32,371 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [165221161] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 00:59:32,371 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1305035222] [2021-11-17 00:59:32,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:32,372 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:59:32,372 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:59:32,373 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 00:59:32,374 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-17 00:59:33,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:33,427 INFO L263 TraceCheckSpWp]: Trace formula consists of 2043 conjuncts, 58 conjunts are in the unsatisfiable core [2021-11-17 00:59:33,434 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:59:34,063 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 79 trivial. 0 not checked. [2021-11-17 00:59:34,063 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 00:59:34,063 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1305035222] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:59:34,063 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 00:59:34,063 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [9] total 22 [2021-11-17 00:59:34,064 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570904111] [2021-11-17 00:59:34,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:59:34,064 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 00:59:34,064 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:34,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 00:59:34,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=416, Unknown=0, NotChecked=0, Total=462 [2021-11-17 00:59:34,065 INFO L87 Difference]: Start difference. First operand 3079 states and 4331 transitions. Second operand has 15 states, 14 states have (on average 7.571428571428571) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 2 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-17 00:59:34,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:34,356 INFO L93 Difference]: Finished difference Result 6138 states and 8723 transitions. [2021-11-17 00:59:34,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-17 00:59:34,357 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 7.571428571428571) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 2 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) Word has length 158 [2021-11-17 00:59:34,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:34,367 INFO L225 Difference]: With dead ends: 6138 [2021-11-17 00:59:34,368 INFO L226 Difference]: Without dead ends: 3102 [2021-11-17 00:59:34,379 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 174 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=72, Invalid=630, Unknown=0, NotChecked=0, Total=702 [2021-11-17 00:59:34,379 INFO L933 BasicCegarLoop]: 946 mSDtfsCounter, 14 mSDsluCounter, 12255 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 13201 SdHoareTripleChecker+Invalid, 161 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:34,380 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [14 Valid, 13201 Invalid, 161 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 00:59:34,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3102 states. [2021-11-17 00:59:34,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3102 to 3091. [2021-11-17 00:59:34,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3091 states, 2290 states have (on average 1.3379912663755458) internal successors, (3064), 2335 states have internal predecessors, (3064), 578 states have call successors, (578), 188 states have call predecessors, (578), 222 states have return successors, (698), 583 states have call predecessors, (698), 577 states have call successors, (698) [2021-11-17 00:59:34,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3091 states to 3091 states and 4340 transitions. [2021-11-17 00:59:34,502 INFO L78 Accepts]: Start accepts. Automaton has 3091 states and 4340 transitions. Word has length 158 [2021-11-17 00:59:34,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:34,502 INFO L470 AbstractCegarLoop]: Abstraction has 3091 states and 4340 transitions. [2021-11-17 00:59:34,502 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 7.571428571428571) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 2 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-17 00:59:34,503 INFO L276 IsEmpty]: Start isEmpty. Operand 3091 states and 4340 transitions. [2021-11-17 00:59:34,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 167 [2021-11-17 00:59:34,510 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:34,510 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:34,547 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-17 00:59:34,723 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2021-11-17 00:59:34,724 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:34,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:34,724 INFO L85 PathProgramCache]: Analyzing trace with hash 1309714198, now seen corresponding path program 1 times [2021-11-17 00:59:34,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:34,724 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [434648716] [2021-11-17 00:59:34,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:34,725 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:34,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:34,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:34,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:34,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:34,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:34,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:34,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:34,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:34,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-17 00:59:35,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-17 00:59:35,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-11-17 00:59:35,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-17 00:59:35,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-11-17 00:59:35,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2021-11-17 00:59:35,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:35,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 00:59:35,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:35,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 00:59:35,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-17 00:59:35,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:35,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:35,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:35,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-17 00:59:35,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,161 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2021-11-17 00:59:35,161 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:35,161 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [434648716] [2021-11-17 00:59:35,161 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [434648716] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 00:59:35,161 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1821907125] [2021-11-17 00:59:35,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:35,162 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:59:35,162 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:59:35,163 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 00:59:35,164 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-17 00:59:35,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:35,906 INFO L263 TraceCheckSpWp]: Trace formula consists of 2101 conjuncts, 54 conjunts are in the unsatisfiable core [2021-11-17 00:59:35,913 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:59:36,590 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2021-11-17 00:59:36,590 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 00:59:36,590 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1821907125] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:59:36,590 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 00:59:36,591 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [9] total 22 [2021-11-17 00:59:36,591 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1943166141] [2021-11-17 00:59:36,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:59:36,591 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 00:59:36,592 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:36,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 00:59:36,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=416, Unknown=0, NotChecked=0, Total=462 [2021-11-17 00:59:36,593 INFO L87 Difference]: Start difference. First operand 3091 states and 4340 transitions. Second operand has 15 states, 14 states have (on average 7.714285714285714) internal successors, (108), 11 states have internal predecessors, (108), 3 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-17 00:59:36,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:36,856 INFO L93 Difference]: Finished difference Result 6156 states and 8723 transitions. [2021-11-17 00:59:36,857 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-17 00:59:36,857 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 7.714285714285714) internal successors, (108), 11 states have internal predecessors, (108), 3 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) Word has length 166 [2021-11-17 00:59:36,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:36,866 INFO L225 Difference]: With dead ends: 6156 [2021-11-17 00:59:36,866 INFO L226 Difference]: Without dead ends: 3108 [2021-11-17 00:59:36,873 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 188 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=72, Invalid=630, Unknown=0, NotChecked=0, Total=702 [2021-11-17 00:59:36,873 INFO L933 BasicCegarLoop]: 944 mSDtfsCounter, 16 mSDsluCounter, 11293 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 12237 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:36,874 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 12237 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 00:59:36,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3108 states. [2021-11-17 00:59:36,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3108 to 3102. [2021-11-17 00:59:36,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3102 states, 2299 states have (on average 1.3353632013919094) internal successors, (3070), 2342 states have internal predecessors, (3070), 578 states have call successors, (578), 188 states have call predecessors, (578), 224 states have return successors, (701), 587 states have call predecessors, (701), 577 states have call successors, (701) [2021-11-17 00:59:36,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3102 states to 3102 states and 4349 transitions. [2021-11-17 00:59:36,960 INFO L78 Accepts]: Start accepts. Automaton has 3102 states and 4349 transitions. Word has length 166 [2021-11-17 00:59:36,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:36,961 INFO L470 AbstractCegarLoop]: Abstraction has 3102 states and 4349 transitions. [2021-11-17 00:59:36,961 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 7.714285714285714) internal successors, (108), 11 states have internal predecessors, (108), 3 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-17 00:59:36,961 INFO L276 IsEmpty]: Start isEmpty. Operand 3102 states and 4349 transitions. [2021-11-17 00:59:36,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2021-11-17 00:59:36,969 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:36,969 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:37,000 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-11-17 00:59:37,195 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:59:37,196 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:37,196 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:37,196 INFO L85 PathProgramCache]: Analyzing trace with hash -1059306404, now seen corresponding path program 1 times [2021-11-17 00:59:37,196 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:37,196 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [532101810] [2021-11-17 00:59:37,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:37,196 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:37,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:37,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:37,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:37,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:37,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-17 00:59:37,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-17 00:59:37,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-11-17 00:59:37,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-17 00:59:37,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-11-17 00:59:37,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-11-17 00:59:37,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:37,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-11-17 00:59:37,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-17 00:59:37,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:59:37,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-17 00:59:37,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:37,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:37,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-17 00:59:37,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:37,513 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-17 00:59:37,514 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:37,514 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [532101810] [2021-11-17 00:59:37,514 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [532101810] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:59:37,514 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:59:37,514 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 00:59:37,515 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1679266001] [2021-11-17 00:59:37,515 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:59:37,515 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 00:59:37,515 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:37,516 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 00:59:37,516 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 00:59:37,516 INFO L87 Difference]: Start difference. First operand 3102 states and 4349 transitions. Second operand has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-11-17 00:59:39,531 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:41,658 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:44,765 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:45,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:45,930 INFO L93 Difference]: Finished difference Result 7300 states and 10250 transitions. [2021-11-17 00:59:45,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:59:45,931 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 169 [2021-11-17 00:59:45,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:45,944 INFO L225 Difference]: With dead ends: 7300 [2021-11-17 00:59:45,944 INFO L226 Difference]: Without dead ends: 4241 [2021-11-17 00:59:45,950 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:59:45,950 INFO L933 BasicCegarLoop]: 1070 mSDtfsCounter, 968 mSDsluCounter, 1730 mSDsCounter, 0 mSdLazyCounter, 915 mSolverCounterSat, 471 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1053 SdHoareTripleChecker+Valid, 2800 SdHoareTripleChecker+Invalid, 1389 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 471 IncrementalHoareTripleChecker+Valid, 915 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.3s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:45,951 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1053 Valid, 2800 Invalid, 1389 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [471 Valid, 915 Invalid, 3 Unknown, 0 Unchecked, 8.3s Time] [2021-11-17 00:59:45,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4241 states. [2021-11-17 00:59:46,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4241 to 3959. [2021-11-17 00:59:46,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3959 states, 2957 states have (on average 1.3364896854920527) internal successors, (3952), 3009 states have internal predecessors, (3952), 704 states have call successors, (704), 248 states have call predecessors, (704), 297 states have return successors, (864), 719 states have call predecessors, (864), 703 states have call successors, (864) [2021-11-17 00:59:46,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3959 states to 3959 states and 5520 transitions. [2021-11-17 00:59:46,066 INFO L78 Accepts]: Start accepts. Automaton has 3959 states and 5520 transitions. Word has length 169 [2021-11-17 00:59:46,067 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:46,067 INFO L470 AbstractCegarLoop]: Abstraction has 3959 states and 5520 transitions. [2021-11-17 00:59:46,067 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-11-17 00:59:46,067 INFO L276 IsEmpty]: Start isEmpty. Operand 3959 states and 5520 transitions. [2021-11-17 00:59:46,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2021-11-17 00:59:46,076 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:46,076 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:46,076 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-17 00:59:46,077 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:46,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:46,077 INFO L85 PathProgramCache]: Analyzing trace with hash -891934254, now seen corresponding path program 1 times [2021-11-17 00:59:46,077 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:46,077 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [626229842] [2021-11-17 00:59:46,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:46,078 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:46,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:46,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:59:46,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:59:46,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-17 00:59:46,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-17 00:59:46,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-17 00:59:46,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-11-17 00:59:46,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-17 00:59:46,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-11-17 00:59:46,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 00:59:46,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:46,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:46,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 00:59:46,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:46,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:46,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-17 00:59:46,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 137 [2021-11-17 00:59:46,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:59:46,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:46,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:59:46,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:46,680 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 139 trivial. 0 not checked. [2021-11-17 00:59:46,680 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:59:46,680 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [626229842] [2021-11-17 00:59:46,681 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [626229842] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 00:59:46,681 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1500486114] [2021-11-17 00:59:46,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:46,681 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:59:46,681 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:59:46,684 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 00:59:46,714 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-17 00:59:47,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:59:47,797 INFO L263 TraceCheckSpWp]: Trace formula consists of 2192 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-17 00:59:47,802 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:59:48,119 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 60 proven. 1 refuted. 0 times theorem prover too weak. 79 trivial. 0 not checked. [2021-11-17 00:59:48,120 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:59:48,551 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 139 trivial. 0 not checked. [2021-11-17 00:59:48,551 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1500486114] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 00:59:48,551 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 00:59:48,551 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2021-11-17 00:59:48,551 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [720308012] [2021-11-17 00:59:48,552 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 00:59:48,552 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-17 00:59:48,552 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:59:48,553 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-17 00:59:48,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=139, Unknown=0, NotChecked=0, Total=182 [2021-11-17 00:59:48,553 INFO L87 Difference]: Start difference. First operand 3959 states and 5520 transitions. Second operand has 14 states, 14 states have (on average 11.071428571428571) internal successors, (155), 10 states have internal predecessors, (155), 2 states have call successors, (47), 6 states have call predecessors, (47), 5 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 00:59:51,666 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:53,704 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:59:55,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:59:55,666 INFO L93 Difference]: Finished difference Result 8297 states and 11636 transitions. [2021-11-17 00:59:55,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-11-17 00:59:55,666 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 11.071428571428571) internal successors, (155), 10 states have internal predecessors, (155), 2 states have call successors, (47), 6 states have call predecessors, (47), 5 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 183 [2021-11-17 00:59:55,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:59:55,685 INFO L225 Difference]: With dead ends: 8297 [2021-11-17 00:59:55,685 INFO L226 Difference]: Without dead ends: 4349 [2021-11-17 00:59:55,695 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 417 GetRequests, 395 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=135, Invalid=371, Unknown=0, NotChecked=0, Total=506 [2021-11-17 00:59:55,696 INFO L933 BasicCegarLoop]: 918 mSDtfsCounter, 551 mSDsluCounter, 4378 mSDsCounter, 0 mSdLazyCounter, 1216 mSolverCounterSat, 648 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 574 SdHoareTripleChecker+Valid, 5296 SdHoareTripleChecker+Invalid, 1866 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 648 IncrementalHoareTripleChecker+Valid, 1216 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2021-11-17 00:59:55,696 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [574 Valid, 5296 Invalid, 1866 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [648 Valid, 1216 Invalid, 2 Unknown, 0 Unchecked, 6.8s Time] [2021-11-17 00:59:55,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4349 states. [2021-11-17 00:59:55,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4349 to 3968. [2021-11-17 00:59:55,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3968 states, 2966 states have (on average 1.3354686446392448) internal successors, (3961), 3018 states have internal predecessors, (3961), 704 states have call successors, (704), 248 states have call predecessors, (704), 297 states have return successors, (864), 719 states have call predecessors, (864), 703 states have call successors, (864) [2021-11-17 00:59:55,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3968 states to 3968 states and 5529 transitions. [2021-11-17 00:59:55,855 INFO L78 Accepts]: Start accepts. Automaton has 3968 states and 5529 transitions. Word has length 183 [2021-11-17 00:59:55,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:59:55,856 INFO L470 AbstractCegarLoop]: Abstraction has 3968 states and 5529 transitions. [2021-11-17 00:59:55,856 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 11.071428571428571) internal successors, (155), 10 states have internal predecessors, (155), 2 states have call successors, (47), 6 states have call predecessors, (47), 5 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 00:59:55,856 INFO L276 IsEmpty]: Start isEmpty. Operand 3968 states and 5529 transitions. [2021-11-17 00:59:55,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2021-11-17 00:59:55,866 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:59:55,866 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:55,899 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-17 00:59:56,091 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:59:56,092 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:59:56,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:59:56,092 INFO L85 PathProgramCache]: Analyzing trace with hash -1723005698, now seen corresponding path program 2 times [2021-11-17 00:59:56,092 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:59:56,092 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [810558386] [2021-11-17 00:59:56,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:59:56,092 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:59:57,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 00:59:57,694 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 00:59:58,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 00:59:58,364 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-17 00:59:58,364 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 00:59:58,365 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 00:59:58,366 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-11-17 00:59:58,369 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:59:58,372 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 00:59:58,413 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 00:59:58,431 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,432 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,432 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,432 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,433 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,433 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,433 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,433 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,434 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,434 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 00:59:58,624 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 12:59:58 BoogieIcfgContainer [2021-11-17 00:59:58,624 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 00:59:58,625 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 00:59:58,625 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 00:59:58,625 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 00:59:58,626 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:58:16" (3/4) ... [2021-11-17 00:59:58,629 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 00:59:58,629 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 00:59:58,630 INFO L158 Benchmark]: Toolchain (without parser) took 108320.90ms. Allocated memory was 94.4MB in the beginning and 547.4MB in the end (delta: 453.0MB). Free memory was 52.0MB in the beginning and 183.6MB in the end (delta: -131.6MB). Peak memory consumption was 319.5MB. Max. memory is 16.1GB. [2021-11-17 00:59:58,630 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 94.4MB. Free memory is still 51.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 00:59:58,630 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1730.34ms. Allocated memory was 94.4MB in the beginning and 192.9MB in the end (delta: 98.6MB). Free memory was 51.8MB in the beginning and 107.5MB in the end (delta: -55.7MB). Peak memory consumption was 51.6MB. Max. memory is 16.1GB. [2021-11-17 00:59:58,631 INFO L158 Benchmark]: Boogie Procedure Inliner took 162.11ms. Allocated memory is still 192.9MB. Free memory was 107.5MB in the beginning and 93.1MB in the end (delta: 14.4MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-11-17 00:59:58,631 INFO L158 Benchmark]: Boogie Preprocessor took 202.68ms. Allocated memory is still 192.9MB. Free memory was 93.1MB in the beginning and 123.8MB in the end (delta: -30.7MB). Peak memory consumption was 23.7MB. Max. memory is 16.1GB. [2021-11-17 00:59:58,632 INFO L158 Benchmark]: RCFGBuilder took 4283.19ms. Allocated memory was 192.9MB in the beginning and 362.8MB in the end (delta: 169.9MB). Free memory was 123.8MB in the beginning and 221.9MB in the end (delta: -98.1MB). Peak memory consumption was 109.1MB. Max. memory is 16.1GB. [2021-11-17 00:59:58,632 INFO L158 Benchmark]: TraceAbstraction took 101932.65ms. Allocated memory was 362.8MB in the beginning and 547.4MB in the end (delta: 184.5MB). Free memory was 220.8MB in the beginning and 183.6MB in the end (delta: 37.2MB). Peak memory consumption was 277.4MB. Max. memory is 16.1GB. [2021-11-17 00:59:58,632 INFO L158 Benchmark]: Witness Printer took 4.04ms. Allocated memory is still 547.4MB. Free memory is still 183.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 00:59:58,634 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 94.4MB. Free memory is still 51.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1730.34ms. Allocated memory was 94.4MB in the beginning and 192.9MB in the end (delta: 98.6MB). Free memory was 51.8MB in the beginning and 107.5MB in the end (delta: -55.7MB). Peak memory consumption was 51.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 162.11ms. Allocated memory is still 192.9MB. Free memory was 107.5MB in the beginning and 93.1MB in the end (delta: 14.4MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Preprocessor took 202.68ms. Allocated memory is still 192.9MB. Free memory was 93.1MB in the beginning and 123.8MB in the end (delta: -30.7MB). Peak memory consumption was 23.7MB. Max. memory is 16.1GB. * RCFGBuilder took 4283.19ms. Allocated memory was 192.9MB in the beginning and 362.8MB in the end (delta: 169.9MB). Free memory was 123.8MB in the beginning and 221.9MB in the end (delta: -98.1MB). Peak memory consumption was 109.1MB. Max. memory is 16.1GB. * TraceAbstraction took 101932.65ms. Allocated memory was 362.8MB in the beginning and 547.4MB in the end (delta: 184.5MB). Free memory was 220.8MB in the beginning and 183.6MB in the end (delta: 37.2MB). Peak memory consumption was 277.4MB. Max. memory is 16.1GB. * Witness Printer took 4.04ms. Allocated memory is still 547.4MB. Free memory is still 183.6MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7323]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8887, overapproximation of bitwiseAnd at line 8897. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=11, ldvarg3={171:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=4, tmp___0=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=11, ldvarg3={171:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={171:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=32, tmp___0=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={171:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=32, tmp___0=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set={0:0}, set={170:0}, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={171:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, descriptor={174:0}, descriptor.flags=0, descriptor___0={173:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=-2, \result=-2, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, c=0, exp=-2, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, descriptor={174:0}, descriptor.flags=0, descriptor___0={173:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND TRUE tmp != 0L [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, sem={167:0}, sem={167:0}, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=1560, tmp___0=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, ldv_func_arg1={165:0}, ldv_func_arg1={165:0}, ldv_func_arg2={4294967354:4294967323}, ldv_func_arg2={4294967354:4294967323}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, descriptor={174:0}, descriptor___0={173:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=0, set_impl={170:0}, tmp=-2, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=-3, \result=-3, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, c=0, exp=-3, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, descriptor={174:0}, descriptor___0={173:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=0, set_impl={170:0}, tmp=-2, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND TRUE tmp___0 != 0L [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=0, set_impl={170:0}, tmp=-2, tmp___0=-3, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=6864, tmp___0=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=232, tmp___0=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9022] COND TRUE ldv_state_variable_1 == 1 [L9023] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8796] int ret ; [L8797] struct usb_card_rec *card ; [L8799] EXPR adapter->card [L8799] card = (struct usb_card_rec *)adapter->card [L8800] EXPR card->usb_boot_state VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, card->usb_boot_state=178, fw={0:0}, fw={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8800] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8812] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8393] struct usb_card_rec *card ; [L8394] int i ; [L8395] int tmp ; [L8396] int tmp___0 ; [L8398] EXPR adapter->card [L8398] card = (struct usb_card_rec *)adapter->card [L8399] card->rx_cmd.adapter = adapter [L8400] EXPR card->rx_cmd_ep [L8400] card->rx_cmd.ep = card->rx_cmd_ep [L8401] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7271] void *p ; [L7272] void *tmp ; [L7273] int tmp___0 ; [L7275] tmp___0 = __VERIFIER_nondet_int() [L7276] COND FALSE !(tmp___0 != 0) [L7279] tmp = malloc(size) [L7280] p = tmp VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={170:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={170:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7282] return (p); VAL [\old(size)=184, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={170:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, arg0=0, arg1=208, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] return ldv_malloc(sizeof(struct urb)); [L8401] RET, EXPR usb_alloc_urb(0, 208U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_alloc_urb(0, 208U)={-18446744073709551615:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8401] card->rx_cmd.urb = usb_alloc_urb(0, 208U) [L8402] EXPR card->rx_cmd.urb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, card->rx_cmd.urb={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8402] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8407] CALL, EXPR ldv_dev_alloc_skb_14(2048U) VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND FALSE !(tmp___0 != 0) [L7296] EXPR, FCALL calloc(1UL, size) [L7296] tmp = calloc(1UL, size) [L7297] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={170:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={170:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7299] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551617:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={170:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551617:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND FALSE !(! skb) [L9387] CALL ldv_set_add(LDV_SKBS, skb) [L9255] int i ; [L9257] i = 0 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9258] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9259] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9269] COND TRUE last_index < 15 [L9270] set_impl[last_index] = e [L9271] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9387] RET ldv_set_add(LDV_SKBS, skb) [L9388] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551617:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={-18446744073709551617:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=0, \old(length)=2048, \result={-18446744073709551617:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp={-18446744073709551617:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] RET, EXPR ldv_dev_alloc_skb_14(2048U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, last_index=1, ldv_dev_alloc_skb_14(2048U)={-18446744073709551617:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] card->rx_cmd.skb = ldv_dev_alloc_skb_14(2048U) [L8408] EXPR card->rx_cmd.skb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, card->rx_cmd.skb={-18446744073709551617:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8408] COND FALSE !((unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0)) [L8413] CALL, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, ctx={170:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7841] struct mwifiex_adapter *adapter ; [L7842] struct usb_card_rec *card ; [L7843] unsigned int tmp ; [L7844] int tmp___0 ; [L7846] EXPR ctx->adapter [L7846] adapter = ctx->adapter [L7847] EXPR adapter->card [L7847] card = (struct usb_card_rec *)adapter->card [L7848] EXPR card->rx_cmd_ep [L7848] EXPR ctx->ep VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={-18446744073709551617:0}, add_remove_card_sem={167:0}, card={4294967355:-29}, card->rx_cmd_ep=182, ctx={170:0}, ctx={170:0}, ctx->ep=181, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=2048, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7848] COND TRUE (int )card->rx_cmd_ep != (int )ctx->ep [L7849] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=248, tmp___0=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND TRUE ! skb [L9385] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=1, \old(length)=2048, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp={0:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={-18446744073709551617:0}, add_remove_card_sem={167:0}, card={4294967355:-29}, ctx={170:0}, ctx={170:0}, last_index=1, ldv_dev_alloc_skb_14((unsigned int )size)={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=2048, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] ctx->skb = ldv_dev_alloc_skb_14((unsigned int )size) [L7850] EXPR ctx->skb VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={-18446744073709551617:0}, add_remove_card_sem={167:0}, card={4294967355:-29}, ctx={170:0}, ctx={170:0}, ctx->skb={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=2048, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7850] COND TRUE (unsigned long )ctx->skb == (unsigned long )((struct sk_buff *)0) [L7851] adapter->dev [L7853] return (-12); VAL [\old(last_index)=1, \old(size)=2048, \result=-12, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={-18446744073709551617:0}, add_remove_card_sem={167:0}, card={4294967355:-29}, ctx={170:0}, ctx={170:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, size=2048, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] RET, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048)=-12, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] tmp = mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) [L8414] COND TRUE tmp != 0 [L8415] return (-1); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=-12, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8812] RET, EXPR mwifiex_usb_rx_init(adapter) [L8812] ret = mwifiex_usb_rx_init(adapter) [L8813] COND FALSE !(ret == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=-1, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8817] return (ret); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={167:0}, card={170:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=-1, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9023] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L9024] ldv_state_variable_1 = 1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9061] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L9062] CALL mwifiex_usb_cleanup_module() [L8908] int tmp ; [L8910] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9477] return __VERIFIER_nondet_int(); [L8910] RET, EXPR down_interruptible(& add_remove_card_sem) [L8910] tmp = down_interruptible(& add_remove_card_sem) [L8911] COND FALSE !(tmp == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=1, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8915] user_rmmod = 1U [L8916] CALL ldv_usb_deregister_18(& mwifiex_usb_driver) [L9235] FCALL usb_deregister(arg) [L9236] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, arg={165:0}, arg={165:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L8916] RET ldv_usb_deregister_18(& mwifiex_usb_driver) [L9062] RET mwifiex_usb_cleanup_module() [L9063] ldv_state_variable_0 = 2 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={171:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9164] CALL ldv_check_final_state() [L9446] int tmp___7 ; [L9448] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L9337] return (last_index == 0); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9448] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L9448] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L9449] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, tmp___7=0, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9451] CALL ldv_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L7323] reach_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967323}, add_remove_card_sem={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, set_impl={170:0}, usb_counter=0, usb_ops={169:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 679 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 101.6s, OverallIterations: 13, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 85.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 25 mSolverCounterUnknown, 8203 SdHoareTripleChecker+Valid, 82.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7643 mSDsluCounter, 67258 SdHoareTripleChecker+Invalid, 78.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 55356 mSDsCounter, 5135 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 10779 IncrementalHoareTripleChecker+Invalid, 15939 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5135 mSolverCounterUnsat, 11902 mSDtfsCounter, 10779 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1275 GetRequests, 1123 SyntacticMatches, 1 SemanticMatches, 151 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=6009occurred in iteration=7, InterpolantAutomatonStates: 116, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.9s AutomataMinimizationTime, 12 MinimizatonAttempts, 4604 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 5.4s SatisfiabilityAnalysisTime, 5.7s InterpolantComputationTime, 2458 NumberOfCodeBlocks, 2458 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 2438 ConstructedInterpolants, 0 QuantifiedInterpolants, 4676 SizeOfPredicates, 39 NumberOfNonLiveVariables, 8349 ConjunctsInSsa, 134 ConjunctsInUnsatCore, 17 InterpolantComputations, 11 PerfectInterpolantSequences, 1524/1530 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 00:59:58,781 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 01:00:00,580 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 01:00:00,583 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 01:00:00,635 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 01:00:00,635 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 01:00:00,638 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 01:00:00,640 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 01:00:00,644 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 01:00:00,646 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 01:00:00,651 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 01:00:00,652 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 01:00:00,653 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 01:00:00,654 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 01:00:00,656 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 01:00:00,657 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 01:00:00,664 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 01:00:00,664 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 01:00:00,665 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 01:00:00,666 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 01:00:00,667 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 01:00:00,668 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 01:00:00,669 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 01:00:00,671 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 01:00:00,672 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 01:00:00,679 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 01:00:00,679 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 01:00:00,679 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 01:00:00,681 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 01:00:00,681 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 01:00:00,682 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 01:00:00,682 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 01:00:00,683 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 01:00:00,684 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 01:00:00,685 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 01:00:00,686 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 01:00:00,686 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 01:00:00,687 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 01:00:00,687 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 01:00:00,687 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 01:00:00,688 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 01:00:00,689 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 01:00:00,692 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-17 01:00:00,728 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 01:00:00,728 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 01:00:00,729 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 01:00:00,729 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 01:00:00,730 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 01:00:00,730 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 01:00:00,731 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 01:00:00,732 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 01:00:00,732 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 01:00:00,732 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 01:00:00,733 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 01:00:00,733 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 01:00:00,733 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 01:00:00,733 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 01:00:00,733 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-17 01:00:00,734 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-17 01:00:00,734 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 01:00:00,734 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 01:00:00,734 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 01:00:00,734 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 01:00:00,734 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 01:00:00,735 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 01:00:00,735 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:00:00,735 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 01:00:00,735 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 01:00:00,735 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 01:00:00,736 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-17 01:00:00,736 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-17 01:00:00,736 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 01:00:00,736 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 01:00:00,736 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 01:00:00,736 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 01:00:00,737 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-17 01:00:00,737 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2021-11-17 01:00:01,087 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 01:00:01,115 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 01:00:01,117 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 01:00:01,118 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 01:00:01,120 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 01:00:01,122 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 01:00:01,185 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/57e708abb/78af1c771f6e482ca498e9202ce8f50a/FLAGe2462967e [2021-11-17 01:00:01,916 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 01:00:01,916 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 01:00:01,956 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/57e708abb/78af1c771f6e482ca498e9202ce8f50a/FLAGe2462967e [2021-11-17 01:00:01,997 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/57e708abb/78af1c771f6e482ca498e9202ce8f50a [2021-11-17 01:00:01,999 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 01:00:02,001 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 01:00:02,004 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 01:00:02,004 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 01:00:02,007 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 01:00:02,007 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:00:01" (1/1) ... [2021-11-17 01:00:02,008 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1184a40c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:02, skipping insertion in model container [2021-11-17 01:00:02,008 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:00:01" (1/1) ... [2021-11-17 01:00:02,014 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 01:00:02,142 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 01:00:02,867 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-17 01:00:03,429 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:00:03,464 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 01:00:03,610 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-17 01:00:03,754 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:00:03,855 INFO L208 MainTranslator]: Completed translation [2021-11-17 01:00:03,856 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03 WrapperNode [2021-11-17 01:00:03,856 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 01:00:03,857 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 01:00:03,857 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 01:00:03,858 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 01:00:03,863 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:03,931 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,105 INFO L137 Inliner]: procedures = 172, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2242 [2021-11-17 01:00:04,106 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 01:00:04,107 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 01:00:04,107 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 01:00:04,108 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 01:00:04,115 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,115 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,161 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,161 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,243 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,263 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,275 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,291 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 01:00:04,292 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 01:00:04,292 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 01:00:04,292 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 01:00:04,293 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (1/1) ... [2021-11-17 01:00:04,304 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:00:04,313 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:00:04,328 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 01:00:04,340 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 01:00:04,364 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-17 01:00:04,364 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-17 01:00:04,364 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-17 01:00:04,365 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-17 01:00:04,365 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-17 01:00:04,365 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2021-11-17 01:00:04,365 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2021-11-17 01:00:04,365 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2021-11-17 01:00:04,365 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2021-11-17 01:00:04,366 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2021-11-17 01:00:04,366 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2021-11-17 01:00:04,366 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-17 01:00:04,366 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-17 01:00:04,366 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 01:00:04,366 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-17 01:00:04,366 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 01:00:04,367 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-17 01:00:04,367 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-17 01:00:04,367 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 01:00:04,367 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 01:00:04,367 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 01:00:04,367 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 01:00:04,368 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-17 01:00:04,368 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-17 01:00:04,368 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-17 01:00:04,368 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-17 01:00:04,368 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 01:00:04,368 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 01:00:04,368 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 01:00:04,369 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 01:00:04,369 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 01:00:04,369 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 01:00:04,369 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 01:00:04,369 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 01:00:04,369 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-17 01:00:04,370 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-17 01:00:04,370 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-17 01:00:04,370 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-17 01:00:04,370 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-17 01:00:04,371 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-17 01:00:04,371 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 01:00:04,371 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 01:00:04,371 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2021-11-17 01:00:04,371 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2021-11-17 01:00:04,371 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 01:00:04,372 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 01:00:04,372 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-17 01:00:04,372 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-17 01:00:04,372 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-17 01:00:04,372 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-17 01:00:04,372 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-17 01:00:04,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-17 01:00:04,373 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 01:00:04,373 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 01:00:04,373 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-17 01:00:04,374 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-17 01:00:04,375 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 01:00:04,375 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 01:00:04,376 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 01:00:04,376 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 01:00:04,376 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 01:00:04,376 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-17 01:00:04,376 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-17 01:00:04,376 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 01:00:04,377 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-17 01:00:04,377 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-17 01:00:04,377 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 01:00:04,377 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 01:00:04,377 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-17 01:00:04,377 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-17 01:00:04,377 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-17 01:00:04,378 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-17 01:00:04,378 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-17 01:00:04,378 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 01:00:04,378 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-17 01:00:04,379 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-17 01:00:04,379 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-17 01:00:04,379 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-17 01:00:04,379 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-17 01:00:04,379 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-17 01:00:04,379 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-17 01:00:04,380 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-17 01:00:04,380 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-17 01:00:04,380 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 01:00:04,380 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-17 01:00:04,380 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 01:00:04,380 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-17 01:00:04,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-17 01:00:04,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-17 01:00:04,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-17 01:00:04,382 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-17 01:00:04,382 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-17 01:00:04,382 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2021-11-17 01:00:04,383 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2021-11-17 01:00:04,383 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-17 01:00:04,383 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-17 01:00:04,383 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-17 01:00:04,383 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-17 01:00:04,383 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-17 01:00:04,384 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-17 01:00:04,384 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-17 01:00:04,384 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-17 01:00:04,384 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-17 01:00:04,384 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-17 01:00:04,384 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 01:00:04,385 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 01:00:04,385 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-17 01:00:04,385 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-17 01:00:04,933 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 01:00:04,935 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 01:00:05,129 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 01:00:16,149 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 01:00:16,159 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 01:00:16,160 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-17 01:00:16,162 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:00:16 BoogieIcfgContainer [2021-11-17 01:00:16,162 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 01:00:16,164 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 01:00:16,164 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 01:00:16,166 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 01:00:16,166 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 01:00:01" (1/3) ... [2021-11-17 01:00:16,167 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18e48738 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:00:16, skipping insertion in model container [2021-11-17 01:00:16,167 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:00:03" (2/3) ... [2021-11-17 01:00:16,167 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18e48738 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:00:16, skipping insertion in model container [2021-11-17 01:00:16,168 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:00:16" (3/3) ... [2021-11-17 01:00:16,169 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 01:00:16,173 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 01:00:16,173 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 01:00:16,213 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 01:00:16,219 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 01:00:16,219 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 01:00:16,247 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2021-11-17 01:00:16,255 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-11-17 01:00:16,255 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:16,256 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:16,256 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:16,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:16,261 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2021-11-17 01:00:16,272 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:16,272 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1191581573] [2021-11-17 01:00:16,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:16,273 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:16,273 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:16,279 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:16,324 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-17 01:00:16,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:16,799 INFO L263 TraceCheckSpWp]: Trace formula consists of 710 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-17 01:00:16,804 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:17,164 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 01:00:17,165 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:17,637 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 01:00:17,638 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:17,638 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1191581573] [2021-11-17 01:00:17,638 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1191581573] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:17,639 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:17,639 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2021-11-17 01:00:17,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291950021] [2021-11-17 01:00:17,642 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:17,647 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 01:00:17,647 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:17,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 01:00:17,679 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-11-17 01:00:17,683 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 6 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 01:00:18,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:18,028 INFO L93 Difference]: Finished difference Result 1360 states and 1969 transitions. [2021-11-17 01:00:18,032 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 01:00:18,033 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 6 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 45 [2021-11-17 01:00:18,033 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:18,054 INFO L225 Difference]: With dead ends: 1360 [2021-11-17 01:00:18,054 INFO L226 Difference]: Without dead ends: 674 [2021-11-17 01:00:18,065 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=25, Invalid=31, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:00:18,068 INFO L933 BasicCegarLoop]: 952 mSDtfsCounter, 9 mSDsluCounter, 954 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 1906 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:18,070 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 1906 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 01:00:18,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 674 states. [2021-11-17 01:00:18,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 674 to 674. [2021-11-17 01:00:18,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 674 states, 503 states have (on average 1.359840954274354) internal successors, (684), 510 states have internal predecessors, (684), 133 states have call successors, (133), 38 states have call predecessors, (133), 37 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2021-11-17 01:00:18,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 674 states to 674 states and 949 transitions. [2021-11-17 01:00:18,173 INFO L78 Accepts]: Start accepts. Automaton has 674 states and 949 transitions. Word has length 45 [2021-11-17 01:00:18,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:18,174 INFO L470 AbstractCegarLoop]: Abstraction has 674 states and 949 transitions. [2021-11-17 01:00:18,175 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 6 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 01:00:18,175 INFO L276 IsEmpty]: Start isEmpty. Operand 674 states and 949 transitions. [2021-11-17 01:00:18,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-17 01:00:18,183 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:18,183 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:18,197 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:18,384 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:18,385 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:18,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:18,385 INFO L85 PathProgramCache]: Analyzing trace with hash 785966256, now seen corresponding path program 1 times [2021-11-17 01:00:18,386 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:18,387 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [937120026] [2021-11-17 01:00:18,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:18,387 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:18,387 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:18,388 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:18,390 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-17 01:00:18,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:18,857 INFO L263 TraceCheckSpWp]: Trace formula consists of 720 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-17 01:00:18,860 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:19,257 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 01:00:19,257 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:20,003 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 01:00:20,004 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:20,004 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [937120026] [2021-11-17 01:00:20,004 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [937120026] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 01:00:20,004 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 01:00:20,004 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 10 [2021-11-17 01:00:20,005 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922703594] [2021-11-17 01:00:20,005 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 01:00:20,006 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-17 01:00:20,006 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:20,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-17 01:00:20,007 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-17 01:00:20,007 INFO L87 Difference]: Start difference. First operand 674 states and 949 transitions. Second operand has 10 states, 10 states have (on average 3.7) internal successors, (37), 10 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 01:00:20,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:20,855 INFO L93 Difference]: Finished difference Result 1343 states and 1892 transitions. [2021-11-17 01:00:20,855 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 01:00:20,856 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 3.7) internal successors, (37), 10 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2021-11-17 01:00:20,856 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:20,860 INFO L225 Difference]: With dead ends: 1343 [2021-11-17 01:00:20,861 INFO L226 Difference]: Without dead ends: 678 [2021-11-17 01:00:20,863 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=71, Invalid=139, Unknown=0, NotChecked=0, Total=210 [2021-11-17 01:00:20,864 INFO L933 BasicCegarLoop]: 940 mSDtfsCounter, 16 mSDsluCounter, 3750 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 4690 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:20,864 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 4690 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-17 01:00:20,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678 states. [2021-11-17 01:00:20,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678 to 678. [2021-11-17 01:00:20,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 678 states, 507 states have (on average 1.3550295857988166) internal successors, (687), 514 states have internal predecessors, (687), 133 states have call successors, (133), 38 states have call predecessors, (133), 37 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2021-11-17 01:00:20,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 678 states to 678 states and 952 transitions. [2021-11-17 01:00:20,894 INFO L78 Accepts]: Start accepts. Automaton has 678 states and 952 transitions. Word has length 47 [2021-11-17 01:00:20,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:20,894 INFO L470 AbstractCegarLoop]: Abstraction has 678 states and 952 transitions. [2021-11-17 01:00:20,895 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 3.7) internal successors, (37), 10 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 01:00:20,895 INFO L276 IsEmpty]: Start isEmpty. Operand 678 states and 952 transitions. [2021-11-17 01:00:20,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-11-17 01:00:20,896 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:20,896 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:20,918 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:21,118 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:21,119 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:21,119 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:21,119 INFO L85 PathProgramCache]: Analyzing trace with hash 728136240, now seen corresponding path program 2 times [2021-11-17 01:00:21,120 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:21,120 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1934992608] [2021-11-17 01:00:21,120 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 01:00:21,120 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:21,121 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:21,124 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:21,125 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-17 01:00:21,513 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 01:00:21,513 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 01:00:21,528 INFO L263 TraceCheckSpWp]: Trace formula consists of 672 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 01:00:21,530 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:21,750 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 01:00:21,750 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:21,972 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 01:00:21,972 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:21,972 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1934992608] [2021-11-17 01:00:21,973 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1934992608] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:21,973 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:21,973 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 01:00:21,973 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1934191873] [2021-11-17 01:00:21,973 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:21,974 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 01:00:21,974 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:21,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 01:00:21,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 01:00:21,975 INFO L87 Difference]: Start difference. First operand 678 states and 952 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 01:00:24,037 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 01:00:26,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:26,898 INFO L93 Difference]: Finished difference Result 2579 states and 3644 transitions. [2021-11-17 01:00:26,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 01:00:26,899 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 49 [2021-11-17 01:00:26,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:26,910 INFO L225 Difference]: With dead ends: 2579 [2021-11-17 01:00:26,910 INFO L226 Difference]: Without dead ends: 1921 [2021-11-17 01:00:26,913 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 01:00:26,915 INFO L933 BasicCegarLoop]: 1198 mSDtfsCounter, 2414 mSDsluCounter, 1523 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 260 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2414 SdHoareTripleChecker+Valid, 2721 SdHoareTripleChecker+Invalid, 533 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 260 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.8s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:26,918 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2414 Valid, 2721 Invalid, 533 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [260 Valid, 272 Invalid, 1 Unknown, 0 Unchecked, 4.8s Time] [2021-11-17 01:00:26,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1921 states. [2021-11-17 01:00:27,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1921 to 1921. [2021-11-17 01:00:27,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1921 states, 1432 states have (on average 1.3652234636871508) internal successors, (1955), 1453 states have internal predecessors, (1955), 379 states have call successors, (379), 110 states have call predecessors, (379), 109 states have return successors, (378), 369 states have call predecessors, (378), 378 states have call successors, (378) [2021-11-17 01:00:27,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1921 states to 1921 states and 2712 transitions. [2021-11-17 01:00:27,047 INFO L78 Accepts]: Start accepts. Automaton has 1921 states and 2712 transitions. Word has length 49 [2021-11-17 01:00:27,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:27,047 INFO L470 AbstractCegarLoop]: Abstraction has 1921 states and 2712 transitions. [2021-11-17 01:00:27,048 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 01:00:27,048 INFO L276 IsEmpty]: Start isEmpty. Operand 1921 states and 2712 transitions. [2021-11-17 01:00:27,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-17 01:00:27,050 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:27,050 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:27,069 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:27,267 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:27,267 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:27,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:27,268 INFO L85 PathProgramCache]: Analyzing trace with hash -602378178, now seen corresponding path program 1 times [2021-11-17 01:00:27,270 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:27,270 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [711023292] [2021-11-17 01:00:27,270 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:27,270 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:27,270 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:27,271 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:27,273 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-17 01:00:27,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:27,821 INFO L263 TraceCheckSpWp]: Trace formula consists of 875 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-17 01:00:27,824 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:28,282 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 01:00:28,282 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:29,117 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 01:00:29,118 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:29,118 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [711023292] [2021-11-17 01:00:29,118 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [711023292] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:29,118 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:29,118 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-17 01:00:29,119 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367332841] [2021-11-17 01:00:29,119 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:29,119 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 01:00:29,119 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:29,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 01:00:29,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:00:29,120 INFO L87 Difference]: Start difference. First operand 1921 states and 2712 transitions. Second operand has 8 states, 6 states have (on average 8.0) internal successors, (48), 7 states have internal predecessors, (48), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-17 01:00:30,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:30,639 INFO L93 Difference]: Finished difference Result 4171 states and 5956 transitions. [2021-11-17 01:00:30,640 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 01:00:30,641 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 8.0) internal successors, (48), 7 states have internal predecessors, (48), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 67 [2021-11-17 01:00:30,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:30,655 INFO L225 Difference]: With dead ends: 4171 [2021-11-17 01:00:30,656 INFO L226 Difference]: Without dead ends: 2270 [2021-11-17 01:00:30,662 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 125 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-17 01:00:30,665 INFO L933 BasicCegarLoop]: 1463 mSDtfsCounter, 431 mSDsluCounter, 6760 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 516 SdHoareTripleChecker+Valid, 8223 SdHoareTripleChecker+Invalid, 184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 40 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:30,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [516 Valid, 8223 Invalid, 184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 143 Invalid, 0 Unknown, 40 Unchecked, 1.3s Time] [2021-11-17 01:00:30,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2270 states. [2021-11-17 01:00:30,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2270 to 1921. [2021-11-17 01:00:30,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1921 states, 1432 states have (on average 1.3645251396648044) internal successors, (1954), 1453 states have internal predecessors, (1954), 379 states have call successors, (379), 110 states have call predecessors, (379), 109 states have return successors, (378), 369 states have call predecessors, (378), 378 states have call successors, (378) [2021-11-17 01:00:30,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1921 states to 1921 states and 2711 transitions. [2021-11-17 01:00:30,752 INFO L78 Accepts]: Start accepts. Automaton has 1921 states and 2711 transitions. Word has length 67 [2021-11-17 01:00:30,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:30,753 INFO L470 AbstractCegarLoop]: Abstraction has 1921 states and 2711 transitions. [2021-11-17 01:00:30,754 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 8.0) internal successors, (48), 7 states have internal predecessors, (48), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-17 01:00:30,754 INFO L276 IsEmpty]: Start isEmpty. Operand 1921 states and 2711 transitions. [2021-11-17 01:00:30,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-17 01:00:30,757 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:30,780 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:30,805 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:31,000 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:31,000 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:31,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:31,001 INFO L85 PathProgramCache]: Analyzing trace with hash 1887150784, now seen corresponding path program 1 times [2021-11-17 01:00:31,002 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:31,002 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [987212103] [2021-11-17 01:00:31,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:31,003 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:31,003 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:31,004 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:31,006 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-17 01:00:31,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:31,602 INFO L263 TraceCheckSpWp]: Trace formula consists of 875 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 01:00:31,604 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:32,275 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 01:00:32,275 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:32,771 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 01:00:32,772 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:32,772 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [987212103] [2021-11-17 01:00:32,772 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [987212103] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:32,772 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:32,772 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 7 [2021-11-17 01:00:32,772 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [734664797] [2021-11-17 01:00:32,772 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:32,773 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-17 01:00:32,773 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:32,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-17 01:00:32,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-17 01:00:32,773 INFO L87 Difference]: Start difference. First operand 1921 states and 2711 transitions. Second operand has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:00:33,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:33,278 INFO L93 Difference]: Finished difference Result 5720 states and 8173 transitions. [2021-11-17 01:00:33,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 01:00:33,280 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 67 [2021-11-17 01:00:33,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:33,299 INFO L225 Difference]: With dead ends: 5720 [2021-11-17 01:00:33,300 INFO L226 Difference]: Without dead ends: 3809 [2021-11-17 01:00:33,307 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 127 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2021-11-17 01:00:33,308 INFO L933 BasicCegarLoop]: 1113 mSDtfsCounter, 895 mSDsluCounter, 5384 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 6497 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:33,308 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [895 Valid, 6497 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-17 01:00:33,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3809 states. [2021-11-17 01:00:33,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3809 to 3809. [2021-11-17 01:00:33,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3809 states, 2838 states have (on average 1.365045806906272) internal successors, (3874), 2880 states have internal predecessors, (3874), 753 states have call successors, (753), 218 states have call predecessors, (753), 217 states have return successors, (797), 734 states have call predecessors, (797), 752 states have call successors, (797) [2021-11-17 01:00:33,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3809 states to 3809 states and 5424 transitions. [2021-11-17 01:00:33,484 INFO L78 Accepts]: Start accepts. Automaton has 3809 states and 5424 transitions. Word has length 67 [2021-11-17 01:00:33,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:33,486 INFO L470 AbstractCegarLoop]: Abstraction has 3809 states and 5424 transitions. [2021-11-17 01:00:33,486 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:00:33,486 INFO L276 IsEmpty]: Start isEmpty. Operand 3809 states and 5424 transitions. [2021-11-17 01:00:33,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-17 01:00:33,494 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:33,494 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:33,515 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:33,711 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:33,712 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:33,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:33,712 INFO L85 PathProgramCache]: Analyzing trace with hash 510620113, now seen corresponding path program 1 times [2021-11-17 01:00:33,713 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:33,713 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1424983472] [2021-11-17 01:00:33,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:33,714 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:33,714 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:33,714 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:33,715 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-17 01:00:34,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:34,239 INFO L263 TraceCheckSpWp]: Trace formula consists of 1034 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 01:00:34,242 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:34,809 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-11-17 01:00:34,810 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:35,249 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-11-17 01:00:35,249 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:35,249 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1424983472] [2021-11-17 01:00:35,249 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1424983472] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:35,249 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:35,249 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-17 01:00:35,249 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [943170051] [2021-11-17 01:00:35,250 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:35,250 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 01:00:35,250 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:35,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 01:00:35,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 01:00:35,251 INFO L87 Difference]: Start difference. First operand 3809 states and 5424 transitions. Second operand has 3 states, 3 states have (on average 33.666666666666664) internal successors, (101), 3 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 01:00:35,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:35,762 INFO L93 Difference]: Finished difference Result 10055 states and 14203 transitions. [2021-11-17 01:00:35,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 01:00:35,762 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 33.666666666666664) internal successors, (101), 3 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 117 [2021-11-17 01:00:35,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:35,795 INFO L225 Difference]: With dead ends: 10055 [2021-11-17 01:00:35,795 INFO L226 Difference]: Without dead ends: 6266 [2021-11-17 01:00:35,809 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 231 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 01:00:35,811 INFO L933 BasicCegarLoop]: 1099 mSDtfsCounter, 603 mSDsluCounter, 894 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 603 SdHoareTripleChecker+Valid, 1993 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:35,811 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [603 Valid, 1993 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-17 01:00:35,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6266 states. [2021-11-17 01:00:36,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6266 to 6253. [2021-11-17 01:00:36,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6253 states, 4628 states have (on average 1.349827139152982) internal successors, (6247), 4700 states have internal predecessors, (6247), 1233 states have call successors, (1233), 392 states have call predecessors, (1233), 391 states have return successors, (1304), 1202 states have call predecessors, (1304), 1232 states have call successors, (1304) [2021-11-17 01:00:36,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6253 states to 6253 states and 8784 transitions. [2021-11-17 01:00:36,126 INFO L78 Accepts]: Start accepts. Automaton has 6253 states and 8784 transitions. Word has length 117 [2021-11-17 01:00:36,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:36,126 INFO L470 AbstractCegarLoop]: Abstraction has 6253 states and 8784 transitions. [2021-11-17 01:00:36,126 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 33.666666666666664) internal successors, (101), 3 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 01:00:36,127 INFO L276 IsEmpty]: Start isEmpty. Operand 6253 states and 8784 transitions. [2021-11-17 01:00:36,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-11-17 01:00:36,137 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:36,137 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:36,161 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-11-17 01:00:36,356 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:36,356 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:36,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:36,356 INFO L85 PathProgramCache]: Analyzing trace with hash -1507578268, now seen corresponding path program 1 times [2021-11-17 01:00:36,358 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:36,358 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1767351361] [2021-11-17 01:00:36,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:36,358 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:36,358 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:36,360 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:36,361 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-17 01:00:36,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:36,935 INFO L263 TraceCheckSpWp]: Trace formula consists of 1064 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 01:00:36,938 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:37,610 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2021-11-17 01:00:37,610 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:38,025 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2021-11-17 01:00:38,025 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:38,025 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1767351361] [2021-11-17 01:00:38,025 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1767351361] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:38,025 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:38,025 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-17 01:00:38,026 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560854732] [2021-11-17 01:00:38,026 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:38,026 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 01:00:38,026 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:38,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 01:00:38,026 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 01:00:38,027 INFO L87 Difference]: Start difference. First operand 6253 states and 8784 transitions. Second operand has 3 states, 3 states have (on average 41.0) internal successors, (123), 3 states have internal predecessors, (123), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 01:00:38,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:38,464 INFO L93 Difference]: Finished difference Result 14606 states and 20503 transitions. [2021-11-17 01:00:38,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 01:00:38,465 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 41.0) internal successors, (123), 3 states have internal predecessors, (123), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 134 [2021-11-17 01:00:38,466 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:38,513 INFO L225 Difference]: With dead ends: 14606 [2021-11-17 01:00:38,513 INFO L226 Difference]: Without dead ends: 8373 [2021-11-17 01:00:38,539 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 265 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 01:00:38,540 INFO L933 BasicCegarLoop]: 1347 mSDtfsCounter, 484 mSDsluCounter, 900 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 2247 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:38,541 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 2247 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 01:00:38,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8373 states. [2021-11-17 01:00:38,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8373 to 8323. [2021-11-17 01:00:38,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8323 states, 6203 states have (on average 1.3553119458326617) internal successors, (8407), 6303 states have internal predecessors, (8407), 1586 states have call successors, (1586), 534 states have call predecessors, (1586), 533 states have return successors, (1681), 1533 states have call predecessors, (1681), 1585 states have call successors, (1681) [2021-11-17 01:00:38,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8323 states to 8323 states and 11674 transitions. [2021-11-17 01:00:38,952 INFO L78 Accepts]: Start accepts. Automaton has 8323 states and 11674 transitions. Word has length 134 [2021-11-17 01:00:38,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:38,952 INFO L470 AbstractCegarLoop]: Abstraction has 8323 states and 11674 transitions. [2021-11-17 01:00:38,953 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 41.0) internal successors, (123), 3 states have internal predecessors, (123), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 01:00:38,953 INFO L276 IsEmpty]: Start isEmpty. Operand 8323 states and 11674 transitions. [2021-11-17 01:00:38,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2021-11-17 01:00:38,972 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:38,972 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:39,008 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:39,191 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:39,191 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:39,192 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:39,192 INFO L85 PathProgramCache]: Analyzing trace with hash 1851568064, now seen corresponding path program 1 times [2021-11-17 01:00:39,193 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:39,193 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [234330225] [2021-11-17 01:00:39,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:39,193 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:39,194 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:39,196 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:39,198 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-17 01:00:39,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:39,865 INFO L263 TraceCheckSpWp]: Trace formula consists of 1103 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 01:00:39,868 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:40,585 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-11-17 01:00:40,585 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:41,068 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2021-11-17 01:00:41,068 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:41,069 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [234330225] [2021-11-17 01:00:41,069 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [234330225] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:41,069 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:41,069 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-17 01:00:41,069 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1158620227] [2021-11-17 01:00:41,069 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:41,069 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 01:00:41,070 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:41,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 01:00:41,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 01:00:41,070 INFO L87 Difference]: Start difference. First operand 8323 states and 11674 transitions. Second operand has 5 states, 5 states have (on average 22.6) internal successors, (113), 5 states have internal predecessors, (113), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-11-17 01:00:43,121 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 01:00:43,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:43,636 INFO L93 Difference]: Finished difference Result 13986 states and 19593 transitions. [2021-11-17 01:00:43,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 01:00:43,637 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 22.6) internal successors, (113), 5 states have internal predecessors, (113), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 142 [2021-11-17 01:00:43,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:43,667 INFO L225 Difference]: With dead ends: 13986 [2021-11-17 01:00:43,671 INFO L226 Difference]: Without dead ends: 5684 [2021-11-17 01:00:43,695 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 284 GetRequests, 279 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-17 01:00:43,696 INFO L933 BasicCegarLoop]: 941 mSDtfsCounter, 24 mSDsluCounter, 2813 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 5 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 3754 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:43,697 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [24 Valid, 3754 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 17 Invalid, 1 Unknown, 0 Unchecked, 2.3s Time] [2021-11-17 01:00:43,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5684 states. [2021-11-17 01:00:43,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5684 to 5596. [2021-11-17 01:00:43,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5596 states, 4172 states have (on average 1.3552253116011506) internal successors, (5654), 4238 states have internal predecessors, (5654), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 363 states have return successors, (1123), 1025 states have call predecessors, (1123), 1059 states have call successors, (1123) [2021-11-17 01:00:43,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5596 states to 5596 states and 7837 transitions. [2021-11-17 01:00:43,905 INFO L78 Accepts]: Start accepts. Automaton has 5596 states and 7837 transitions. Word has length 142 [2021-11-17 01:00:43,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:43,905 INFO L470 AbstractCegarLoop]: Abstraction has 5596 states and 7837 transitions. [2021-11-17 01:00:43,905 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 22.6) internal successors, (113), 5 states have internal predecessors, (113), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-11-17 01:00:43,905 INFO L276 IsEmpty]: Start isEmpty. Operand 5596 states and 7837 transitions. [2021-11-17 01:00:43,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-11-17 01:00:43,920 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:43,920 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:43,949 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:44,144 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:44,145 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:44,145 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:44,145 INFO L85 PathProgramCache]: Analyzing trace with hash -1046565723, now seen corresponding path program 1 times [2021-11-17 01:00:44,146 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:44,146 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [179734085] [2021-11-17 01:00:44,146 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:44,146 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:44,147 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:44,147 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:44,148 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-17 01:00:44,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:44,828 INFO L263 TraceCheckSpWp]: Trace formula consists of 1124 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-17 01:00:44,834 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:45,648 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2021-11-17 01:00:45,648 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:46,597 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-17 01:00:46,598 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:46,600 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [179734085] [2021-11-17 01:00:46,600 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [179734085] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:46,600 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:46,600 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-17 01:00:46,600 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [877908985] [2021-11-17 01:00:46,600 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:46,600 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 01:00:46,600 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:46,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 01:00:46,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:00:46,601 INFO L87 Difference]: Start difference. First operand 5596 states and 7837 transitions. Second operand has 8 states, 6 states have (on average 20.0) internal successors, (120), 7 states have internal predecessors, (120), 4 states have call successors, (23), 2 states have call predecessors, (23), 4 states have return successors, (22), 3 states have call predecessors, (22), 4 states have call successors, (22) [2021-11-17 01:00:48,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:48,003 INFO L93 Difference]: Finished difference Result 11151 states and 15624 transitions. [2021-11-17 01:00:48,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 01:00:48,004 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 20.0) internal successors, (120), 7 states have internal predecessors, (120), 4 states have call successors, (23), 2 states have call predecessors, (23), 4 states have return successors, (22), 3 states have call predecessors, (22), 4 states have call successors, (22) Word has length 148 [2021-11-17 01:00:48,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:48,023 INFO L225 Difference]: With dead ends: 11151 [2021-11-17 01:00:48,023 INFO L226 Difference]: Without dead ends: 5601 [2021-11-17 01:00:48,039 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 295 GetRequests, 287 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-17 01:00:48,041 INFO L933 BasicCegarLoop]: 945 mSDtfsCounter, 419 mSDsluCounter, 4201 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 502 SdHoareTripleChecker+Valid, 5146 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 30 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:48,041 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [502 Valid, 5146 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 86 Invalid, 0 Unknown, 30 Unchecked, 1.1s Time] [2021-11-17 01:00:48,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5601 states. [2021-11-17 01:00:48,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5601 to 5596. [2021-11-17 01:00:48,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5596 states, 4172 states have (on average 1.354745925215724) internal successors, (5652), 4238 states have internal predecessors, (5652), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 363 states have return successors, (1123), 1025 states have call predecessors, (1123), 1059 states have call successors, (1123) [2021-11-17 01:00:48,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5596 states to 5596 states and 7835 transitions. [2021-11-17 01:00:48,281 INFO L78 Accepts]: Start accepts. Automaton has 5596 states and 7835 transitions. Word has length 148 [2021-11-17 01:00:48,282 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:48,282 INFO L470 AbstractCegarLoop]: Abstraction has 5596 states and 7835 transitions. [2021-11-17 01:00:48,282 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 20.0) internal successors, (120), 7 states have internal predecessors, (120), 4 states have call successors, (23), 2 states have call predecessors, (23), 4 states have return successors, (22), 3 states have call predecessors, (22), 4 states have call successors, (22) [2021-11-17 01:00:48,282 INFO L276 IsEmpty]: Start isEmpty. Operand 5596 states and 7835 transitions. [2021-11-17 01:00:48,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-11-17 01:00:48,295 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:48,295 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:48,327 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:48,512 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:48,512 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:48,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:48,513 INFO L85 PathProgramCache]: Analyzing trace with hash 829917095, now seen corresponding path program 1 times [2021-11-17 01:00:48,513 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:48,514 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [160187360] [2021-11-17 01:00:48,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:48,514 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:48,514 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:48,515 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:48,520 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-17 01:00:49,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:49,250 INFO L263 TraceCheckSpWp]: Trace formula consists of 1124 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-17 01:00:49,254 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:50,108 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-17 01:00:50,108 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:51,531 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 99 trivial. 0 not checked. [2021-11-17 01:00:51,531 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:51,531 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [160187360] [2021-11-17 01:00:51,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [160187360] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:51,531 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:51,531 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7, 7] imperfect sequences [] total 12 [2021-11-17 01:00:51,531 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2123479590] [2021-11-17 01:00:51,531 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:51,532 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-11-17 01:00:51,532 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:51,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-11-17 01:00:51,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2021-11-17 01:00:51,533 INFO L87 Difference]: Start difference. First operand 5596 states and 7835 transitions. Second operand has 12 states, 12 states have (on average 9.583333333333334) internal successors, (115), 8 states have internal predecessors, (115), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-17 01:00:51,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:51,869 INFO L93 Difference]: Finished difference Result 11210 states and 15735 transitions. [2021-11-17 01:00:51,871 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 01:00:51,871 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.583333333333334) internal successors, (115), 8 states have internal predecessors, (115), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) Word has length 148 [2021-11-17 01:00:51,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:51,889 INFO L225 Difference]: With dead ends: 11210 [2021-11-17 01:00:51,889 INFO L226 Difference]: Without dead ends: 5660 [2021-11-17 01:00:51,903 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 294 GetRequests, 284 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2021-11-17 01:00:51,903 INFO L933 BasicCegarLoop]: 938 mSDtfsCounter, 0 mSDsluCounter, 4685 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 5623 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:51,904 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 5623 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 01:00:51,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5660 states. [2021-11-17 01:00:52,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5660 to 5652. [2021-11-17 01:00:52,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5652 states, 4212 states have (on average 1.3513770180436848) internal successors, (5692), 4278 states have internal predecessors, (5692), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 379 states have return successors, (1183), 1041 states have call predecessors, (1183), 1059 states have call successors, (1183) [2021-11-17 01:00:52,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5652 states to 5652 states and 7935 transitions. [2021-11-17 01:00:52,096 INFO L78 Accepts]: Start accepts. Automaton has 5652 states and 7935 transitions. Word has length 148 [2021-11-17 01:00:52,097 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:52,097 INFO L470 AbstractCegarLoop]: Abstraction has 5652 states and 7935 transitions. [2021-11-17 01:00:52,097 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.583333333333334) internal successors, (115), 8 states have internal predecessors, (115), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-17 01:00:52,097 INFO L276 IsEmpty]: Start isEmpty. Operand 5652 states and 7935 transitions. [2021-11-17 01:00:52,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2021-11-17 01:00:52,109 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:52,110 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:52,139 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:52,335 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:52,336 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:52,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:52,336 INFO L85 PathProgramCache]: Analyzing trace with hash 198615179, now seen corresponding path program 1 times [2021-11-17 01:00:52,337 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:52,337 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [45030408] [2021-11-17 01:00:52,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:52,337 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:52,338 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:52,338 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:52,339 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-17 01:00:53,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:53,054 INFO L263 TraceCheckSpWp]: Trace formula consists of 1139 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-17 01:00:53,057 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:53,651 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 01:00:53,651 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:00:54,629 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 01:00:54,629 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:00:54,629 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [45030408] [2021-11-17 01:00:54,629 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [45030408] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:00:54,630 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:00:54,630 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-17 01:00:54,630 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1928849997] [2021-11-17 01:00:54,630 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:00:54,630 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 01:00:54,630 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:00:54,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 01:00:54,631 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 01:00:54,631 INFO L87 Difference]: Start difference. First operand 5652 states and 7935 transitions. Second operand has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2021-11-17 01:00:54,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:00:54,888 INFO L93 Difference]: Finished difference Result 11336 states and 16103 transitions. [2021-11-17 01:00:54,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 01:00:54,889 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) Word has length 154 [2021-11-17 01:00:54,889 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:00:54,911 INFO L225 Difference]: With dead ends: 11336 [2021-11-17 01:00:54,912 INFO L226 Difference]: Without dead ends: 5730 [2021-11-17 01:00:54,926 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 306 GetRequests, 303 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 01:00:54,927 INFO L933 BasicCegarLoop]: 937 mSDtfsCounter, 2 mSDsluCounter, 2806 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3743 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:00:54,928 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 3743 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 01:00:54,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5730 states. [2021-11-17 01:00:55,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5730 to 5712. [2021-11-17 01:00:55,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5712 states, 4254 states have (on average 1.3479078514339444) internal successors, (5734), 4326 states have internal predecessors, (5734), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 397 states have return successors, (1205), 1053 states have call predecessors, (1205), 1059 states have call successors, (1205) [2021-11-17 01:00:55,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5712 states to 5712 states and 7999 transitions. [2021-11-17 01:00:55,153 INFO L78 Accepts]: Start accepts. Automaton has 5712 states and 7999 transitions. Word has length 154 [2021-11-17 01:00:55,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:00:55,154 INFO L470 AbstractCegarLoop]: Abstraction has 5712 states and 7999 transitions. [2021-11-17 01:00:55,154 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2021-11-17 01:00:55,154 INFO L276 IsEmpty]: Start isEmpty. Operand 5712 states and 7999 transitions. [2021-11-17 01:00:55,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-11-17 01:00:55,167 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:00:55,168 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:00:55,198 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-11-17 01:00:55,387 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:00:55,387 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:00:55,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:00:55,388 INFO L85 PathProgramCache]: Analyzing trace with hash -1478023259, now seen corresponding path program 1 times [2021-11-17 01:00:55,389 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:00:55,389 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [680232443] [2021-11-17 01:00:55,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:00:55,389 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:00:55,390 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:00:55,391 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:00:55,393 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-17 01:00:56,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:00:56,175 INFO L263 TraceCheckSpWp]: Trace formula consists of 1162 conjuncts, 29 conjunts are in the unsatisfiable core [2021-11-17 01:00:56,178 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:00:57,849 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-11-17 01:00:57,850 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:01:02,907 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-11-17 01:01:02,908 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:01:02,908 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [680232443] [2021-11-17 01:01:02,908 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [680232443] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:01:02,908 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:01:02,908 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12, 12] imperfect sequences [] total 22 [2021-11-17 01:01:02,908 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [580038907] [2021-11-17 01:01:02,908 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:01:02,908 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-11-17 01:01:02,909 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:01:02,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-11-17 01:01:02,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=411, Unknown=0, NotChecked=0, Total=462 [2021-11-17 01:01:02,909 INFO L87 Difference]: Start difference. First operand 5712 states and 7999 transitions. Second operand has 22 states, 22 states have (on average 5.363636363636363) internal successors, (118), 16 states have internal predecessors, (118), 4 states have call successors, (18), 2 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 3 states have call successors, (20) [2021-11-17 01:01:04,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:01:04,438 INFO L93 Difference]: Finished difference Result 11448 states and 16183 transitions. [2021-11-17 01:01:04,439 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 01:01:04,440 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 5.363636363636363) internal successors, (118), 16 states have internal predecessors, (118), 4 states have call successors, (18), 2 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 3 states have call successors, (20) Word has length 161 [2021-11-17 01:01:04,440 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:01:04,459 INFO L225 Difference]: With dead ends: 11448 [2021-11-17 01:01:04,459 INFO L226 Difference]: Without dead ends: 5782 [2021-11-17 01:01:04,473 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 301 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=72, Invalid=528, Unknown=0, NotChecked=0, Total=600 [2021-11-17 01:01:04,474 INFO L933 BasicCegarLoop]: 947 mSDtfsCounter, 15 mSDsluCounter, 13204 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 14151 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-11-17 01:01:04,474 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 14151 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-11-17 01:01:04,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5782 states. [2021-11-17 01:01:04,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5782 to 5766. [2021-11-17 01:01:04,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5766 states, 4294 states have (on average 1.3418723800652073) internal successors, (5762), 4362 states have internal predecessors, (5762), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 411 states have return successors, (1233), 1071 states have call predecessors, (1233), 1059 states have call successors, (1233) [2021-11-17 01:01:04,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5766 states to 5766 states and 8055 transitions. [2021-11-17 01:01:04,707 INFO L78 Accepts]: Start accepts. Automaton has 5766 states and 8055 transitions. Word has length 161 [2021-11-17 01:01:04,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:01:04,708 INFO L470 AbstractCegarLoop]: Abstraction has 5766 states and 8055 transitions. [2021-11-17 01:01:04,708 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 5.363636363636363) internal successors, (118), 16 states have internal predecessors, (118), 4 states have call successors, (18), 2 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 3 states have call successors, (20) [2021-11-17 01:01:04,708 INFO L276 IsEmpty]: Start isEmpty. Operand 5766 states and 8055 transitions. [2021-11-17 01:01:04,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2021-11-17 01:01:04,723 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:01:04,723 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:01:04,751 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-17 01:01:04,939 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:01:04,940 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:01:04,940 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:01:04,940 INFO L85 PathProgramCache]: Analyzing trace with hash 561002325, now seen corresponding path program 1 times [2021-11-17 01:01:04,941 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:01:04,941 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1626532046] [2021-11-17 01:01:04,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:01:04,942 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:01:04,942 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:01:04,943 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:01:04,945 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-17 01:01:05,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:01:05,889 INFO L263 TraceCheckSpWp]: Trace formula consists of 1196 conjuncts, 26 conjunts are in the unsatisfiable core [2021-11-17 01:01:05,893 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:01:07,717 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 01:01:07,717 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:01:13,751 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 01:01:13,751 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:01:13,752 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1626532046] [2021-11-17 01:01:13,752 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1626532046] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:01:13,752 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:01:13,752 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13, 13] imperfect sequences [] total 14 [2021-11-17 01:01:13,752 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [23049564] [2021-11-17 01:01:13,752 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:01:13,752 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-17 01:01:13,753 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:01:13,753 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-17 01:01:13,753 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=155, Unknown=0, NotChecked=0, Total=182 [2021-11-17 01:01:13,753 INFO L87 Difference]: Start difference. First operand 5766 states and 8055 transitions. Second operand has 14 states, 14 states have (on average 7.928571428571429) internal successors, (111), 10 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-17 01:01:15,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:01:15,407 INFO L93 Difference]: Finished difference Result 11526 states and 16243 transitions. [2021-11-17 01:01:15,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 01:01:15,409 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 7.928571428571429) internal successors, (111), 10 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) Word has length 170 [2021-11-17 01:01:15,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:01:15,428 INFO L225 Difference]: With dead ends: 11526 [2021-11-17 01:01:15,429 INFO L226 Difference]: Without dead ends: 5806 [2021-11-17 01:01:15,445 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 327 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=40, Invalid=232, Unknown=0, NotChecked=0, Total=272 [2021-11-17 01:01:15,446 INFO L933 BasicCegarLoop]: 943 mSDtfsCounter, 11 mSDsluCounter, 10339 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 11282 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-11-17 01:01:15,446 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11 Valid, 11282 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-11-17 01:01:15,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5806 states. [2021-11-17 01:01:15,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5806 to 5800. [2021-11-17 01:01:15,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5800 states, 4324 states have (on average 1.33950046253469) internal successors, (5792), 4382 states have internal predecessors, (5792), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 415 states have return successors, (1239), 1085 states have call predecessors, (1239), 1059 states have call successors, (1239) [2021-11-17 01:01:15,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5800 states to 5800 states and 8091 transitions. [2021-11-17 01:01:15,602 INFO L78 Accepts]: Start accepts. Automaton has 5800 states and 8091 transitions. Word has length 170 [2021-11-17 01:01:15,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:01:15,602 INFO L470 AbstractCegarLoop]: Abstraction has 5800 states and 8091 transitions. [2021-11-17 01:01:15,602 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 7.928571428571429) internal successors, (111), 10 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-17 01:01:15,602 INFO L276 IsEmpty]: Start isEmpty. Operand 5800 states and 8091 transitions. [2021-11-17 01:01:15,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-11-17 01:01:15,615 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:01:15,615 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:01:15,643 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-17 01:01:15,835 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:01:15,835 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:01:15,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:01:15,836 INFO L85 PathProgramCache]: Analyzing trace with hash -1188259002, now seen corresponding path program 1 times [2021-11-17 01:01:15,837 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:01:15,837 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [677099656] [2021-11-17 01:01:15,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:01:15,837 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:01:15,837 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:01:15,838 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:01:15,839 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-17 01:01:16,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:01:16,529 INFO L263 TraceCheckSpWp]: Trace formula consists of 1177 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 01:01:16,532 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:01:17,529 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 80 proven. 0 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2021-11-17 01:01:17,529 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:01:18,140 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-11-17 01:01:18,141 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:01:18,141 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [677099656] [2021-11-17 01:01:18,141 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [677099656] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:01:18,141 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:01:18,142 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 01:01:18,142 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324215270] [2021-11-17 01:01:18,142 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:01:18,142 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 01:01:18,143 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:01:18,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 01:01:18,143 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 01:01:18,143 INFO L87 Difference]: Start difference. First operand 5800 states and 8091 transitions. Second operand has 4 states, 4 states have (on average 45.0) internal successors, (180), 4 states have internal predecessors, (180), 4 states have call successors, (32), 3 states have call predecessors, (32), 3 states have return successors, (31), 4 states have call predecessors, (31), 4 states have call successors, (31) [2021-11-17 01:01:20,194 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 01:01:22,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:01:22,231 INFO L93 Difference]: Finished difference Result 16146 states and 22418 transitions. [2021-11-17 01:01:22,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 01:01:22,232 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 45.0) internal successors, (180), 4 states have internal predecessors, (180), 4 states have call successors, (32), 3 states have call predecessors, (32), 3 states have return successors, (31), 4 states have call predecessors, (31), 4 states have call successors, (31) Word has length 172 [2021-11-17 01:01:22,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:01:22,262 INFO L225 Difference]: With dead ends: 16146 [2021-11-17 01:01:22,262 INFO L226 Difference]: Without dead ends: 10392 [2021-11-17 01:01:22,273 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 340 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 01:01:22,273 INFO L933 BasicCegarLoop]: 1250 mSDtfsCounter, 1797 mSDsluCounter, 1172 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 208 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1797 SdHoareTripleChecker+Valid, 2422 SdHoareTripleChecker+Invalid, 436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 208 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2021-11-17 01:01:22,274 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1797 Valid, 2422 Invalid, 436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [208 Valid, 227 Invalid, 1 Unknown, 0 Unchecked, 3.8s Time] [2021-11-17 01:01:22,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10392 states. [2021-11-17 01:01:22,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10392 to 10336. [2021-11-17 01:01:22,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10336 states, 7780 states have (on average 1.3359897172236503) internal successors, (10394), 7870 states have internal predecessors, (10394), 1756 states have call successors, (1756), 696 states have call predecessors, (1756), 799 states have return successors, (2095), 1809 states have call predecessors, (2095), 1755 states have call successors, (2095) [2021-11-17 01:01:22,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10336 states to 10336 states and 14245 transitions. [2021-11-17 01:01:22,560 INFO L78 Accepts]: Start accepts. Automaton has 10336 states and 14245 transitions. Word has length 172 [2021-11-17 01:01:22,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:01:22,560 INFO L470 AbstractCegarLoop]: Abstraction has 10336 states and 14245 transitions. [2021-11-17 01:01:22,560 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 45.0) internal successors, (180), 4 states have internal predecessors, (180), 4 states have call successors, (32), 3 states have call predecessors, (32), 3 states have return successors, (31), 4 states have call predecessors, (31), 4 states have call successors, (31) [2021-11-17 01:01:22,560 INFO L276 IsEmpty]: Start isEmpty. Operand 10336 states and 14245 transitions. [2021-11-17 01:01:22,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2021-11-17 01:01:22,583 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:01:22,583 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:01:22,613 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-17 01:01:22,804 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:01:22,805 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:01:22,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:01:22,805 INFO L85 PathProgramCache]: Analyzing trace with hash -1401601602, now seen corresponding path program 1 times [2021-11-17 01:01:22,806 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:01:22,806 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1696042942] [2021-11-17 01:01:22,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:01:22,806 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:01:22,807 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:01:22,807 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:01:22,810 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-11-17 01:01:38,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 01:01:38,673 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 01:01:59,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 01:02:01,215 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-17 01:02:01,215 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 01:02:01,216 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 01:02:01,275 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-11-17 01:02:01,428 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:02:01,432 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:02:01,434 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 01:02:01,478 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 01:02:01,499 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,499 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,499 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,500 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,500 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,500 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,501 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,501 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,502 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,502 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:02:01,698 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 01:02:01 BoogieIcfgContainer [2021-11-17 01:02:01,698 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 01:02:01,699 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 01:02:01,699 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 01:02:01,699 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 01:02:01,699 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:00:16" (3/4) ... [2021-11-17 01:02:01,703 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 01:02:01,703 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 01:02:01,704 INFO L158 Benchmark]: Toolchain (without parser) took 119703.17ms. Allocated memory was 60.8MB in the beginning and 604.0MB in the end (delta: 543.2MB). Free memory was 28.3MB in the beginning and 275.9MB in the end (delta: -247.6MB). Peak memory consumption was 294.9MB. Max. memory is 16.1GB. [2021-11-17 01:02:01,704 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 60.8MB. Free memory was 42.9MB in the beginning and 42.8MB in the end (delta: 73.5kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 01:02:01,705 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1852.99ms. Allocated memory was 60.8MB in the beginning and 115.3MB in the end (delta: 54.5MB). Free memory was 28.2MB in the beginning and 38.4MB in the end (delta: -10.2MB). Peak memory consumption was 50.2MB. Max. memory is 16.1GB. [2021-11-17 01:02:01,706 INFO L158 Benchmark]: Boogie Procedure Inliner took 248.80ms. Allocated memory was 115.3MB in the beginning and 195.0MB in the end (delta: 79.7MB). Free memory was 38.3MB in the beginning and 128.2MB in the end (delta: -90.0MB). Peak memory consumption was 5.4MB. Max. memory is 16.1GB. [2021-11-17 01:02:01,706 INFO L158 Benchmark]: Boogie Preprocessor took 184.08ms. Allocated memory is still 195.0MB. Free memory was 128.2MB in the beginning and 111.5MB in the end (delta: 16.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-11-17 01:02:01,706 INFO L158 Benchmark]: RCFGBuilder took 11870.18ms. Allocated memory was 195.0MB in the beginning and 289.4MB in the end (delta: 94.4MB). Free memory was 111.5MB in the beginning and 215.7MB in the end (delta: -104.2MB). Peak memory consumption was 117.8MB. Max. memory is 16.1GB. [2021-11-17 01:02:01,707 INFO L158 Benchmark]: TraceAbstraction took 105534.46ms. Allocated memory was 289.4MB in the beginning and 604.0MB in the end (delta: 314.6MB). Free memory was 215.7MB in the beginning and 275.9MB in the end (delta: -60.3MB). Peak memory consumption was 254.3MB. Max. memory is 16.1GB. [2021-11-17 01:02:01,707 INFO L158 Benchmark]: Witness Printer took 4.73ms. Allocated memory is still 604.0MB. Free memory is still 275.9MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 01:02:01,708 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 60.8MB. Free memory was 42.9MB in the beginning and 42.8MB in the end (delta: 73.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1852.99ms. Allocated memory was 60.8MB in the beginning and 115.3MB in the end (delta: 54.5MB). Free memory was 28.2MB in the beginning and 38.4MB in the end (delta: -10.2MB). Peak memory consumption was 50.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 248.80ms. Allocated memory was 115.3MB in the beginning and 195.0MB in the end (delta: 79.7MB). Free memory was 38.3MB in the beginning and 128.2MB in the end (delta: -90.0MB). Peak memory consumption was 5.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 184.08ms. Allocated memory is still 195.0MB. Free memory was 128.2MB in the beginning and 111.5MB in the end (delta: 16.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * RCFGBuilder took 11870.18ms. Allocated memory was 195.0MB in the beginning and 289.4MB in the end (delta: 94.4MB). Free memory was 111.5MB in the beginning and 215.7MB in the end (delta: -104.2MB). Peak memory consumption was 117.8MB. Max. memory is 16.1GB. * TraceAbstraction took 105534.46ms. Allocated memory was 289.4MB in the beginning and 604.0MB in the end (delta: 314.6MB). Free memory was 215.7MB in the beginning and 275.9MB in the end (delta: -60.3MB). Peak memory consumption was 254.3MB. Max. memory is 16.1GB. * Witness Printer took 4.73ms. Allocated memory is still 604.0MB. Free memory is still 275.9MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7323]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8887. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=2, ldvarg3={-962:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=4, tmp___0=2147483648, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=2, ldvarg3={-962:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg3={-962:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=32, tmp___0=2147483648, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg3={-962:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=32, tmp___0=2147484672, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set={0:0}, set={-961:0}, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={-962:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, descriptor={-963:0}, descriptor.flags=0, descriptor___0={-837:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, descriptor={-963:0}, descriptor.flags=0, descriptor___0={-837:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND FALSE !(tmp != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, descriptor={-963:0}, descriptor___0={-837:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, sem={-967:0}, sem={-967:0}, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=1560, tmp___0=2147483908, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, ldv_func_arg1={-966:0}, ldv_func_arg1={-966:0}, ldv_func_arg2={167:166}, ldv_func_arg2={167:166}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, descriptor={-963:0}, descriptor___0={-837:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, ret=0, set_impl={-961:0}, tmp=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, descriptor={-963:0}, descriptor___0={-837:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, ret=0, set_impl={-961:0}, tmp=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND FALSE !(tmp___0 != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, descriptor={-963:0}, descriptor___0={-837:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, ret=0, set_impl={-961:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, ret=0, set_impl={-961:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=6864, tmp___0=2147483648, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=232, tmp___0=2147483648, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9022] COND TRUE ldv_state_variable_1 == 1 [L9023] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8796] int ret ; [L8797] struct usb_card_rec *card ; [L8799] EXPR adapter->card [L8799] card = (struct usb_card_rec *)adapter->card [L8800] EXPR card->usb_boot_state VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, card->usb_boot_state=0, fw={0:0}, fw={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8800] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8812] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8393] struct usb_card_rec *card ; [L8394] int i ; [L8395] int tmp ; [L8396] int tmp___0 ; [L8398] EXPR adapter->card [L8398] card = (struct usb_card_rec *)adapter->card [L8399] card->rx_cmd.adapter = adapter [L8400] EXPR card->rx_cmd_ep [L8400] card->rx_cmd.ep = card->rx_cmd_ep [L8401] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=null, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7271] void *p ; [L7272] void *tmp ; [L7273] int tmp___0 ; [L7275] tmp___0 = __VERIFIER_nondet_int() [L7276] COND FALSE !(tmp___0 != 0) [L7279] tmp = malloc(size) [L7280] p = tmp VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, p={218:0}, ref_cnt=0, set_impl={-961:0}, size=184, tmp={218:0}, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, p={218:0}, ref_cnt=0, set_impl={-961:0}, size=184, tmp={218:0}, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7282] return (p); VAL [\old(size)=184, \result={218:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, p={218:0}, ref_cnt=0, set_impl={-961:0}, size=184, tmp={218:0}, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=null, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, arg0=null, arg1=208, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={218:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] return ldv_malloc(sizeof(struct urb)); [L8401] RET, EXPR usb_alloc_urb(0, 208U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_alloc_urb(0, 208U)={218:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8401] card->rx_cmd.urb = usb_alloc_urb(0, 208U) [L8402] EXPR card->rx_cmd.urb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, card->rx_cmd.urb={218:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8402] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8407] CALL, EXPR ldv_dev_alloc_skb_14(2048U) VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND FALSE !(tmp___0 != 0) [L7296] EXPR, FCALL calloc(1UL, size) [L7296] tmp = calloc(1UL, size) [L7297] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, calloc(1UL, size)={595:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, p={595:0}, ref_cnt=0, set_impl={-961:0}, size=248, tmp={595:0}, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, calloc(1UL, size)={595:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, p={595:0}, ref_cnt=0, set_impl={-961:0}, size=248, tmp={595:0}, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7299] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={595:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, calloc(1UL, size)={595:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, p={595:0}, ref_cnt=0, set_impl={-961:0}, size=248, tmp={595:0}, tmp___0=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={595:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, skb={595:0}, tmp___7={595:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND FALSE !(! skb) [L9387] CALL ldv_set_add(LDV_SKBS, skb) [L9255] int i ; [L9257] i = 0 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, e={595:0}, e={595:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9258] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, e={595:0}, e={595:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9259] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, e={595:0}, e={595:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9269] COND TRUE last_index < 15 [L9270] set_impl[last_index] = e [L9271] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, e={595:0}, e={595:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9387] RET ldv_set_add(LDV_SKBS, skb) [L9388] return (skb); VAL [\old(last_index)=0, \result={595:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, skb={595:0}, tmp___7={595:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={595:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=0, \old(length)=2048, \result={595:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp={595:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] RET, EXPR ldv_dev_alloc_skb_14(2048U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, last_index=1, ldv_dev_alloc_skb_14(2048U)={595:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] card->rx_cmd.skb = ldv_dev_alloc_skb_14(2048U) [L8408] EXPR card->rx_cmd.skb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, card->rx_cmd.skb={595:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8408] COND FALSE !((unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0)) [L8413] CALL, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, ctx={-961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7841] struct mwifiex_adapter *adapter ; [L7842] struct usb_card_rec *card ; [L7843] unsigned int tmp ; [L7844] int tmp___0 ; [L7846] EXPR ctx->adapter [L7846] adapter = ctx->adapter [L7847] EXPR adapter->card [L7847] card = (struct usb_card_rec *)adapter->card [L7848] EXPR card->rx_cmd_ep [L7848] EXPR ctx->ep VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={595:0}, add_remove_card_sem={-967:0}, card={-961:-24}, card->rx_cmd_ep=-1, ctx={-961:0}, ctx={-961:0}, ctx->ep=-2, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=2048, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7848] COND TRUE (int )card->rx_cmd_ep != (int )ctx->ep [L7849] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=248, tmp___0=2147483648, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND TRUE ! skb [L9385] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=1, \old(length)=2048, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp={0:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={595:0}, add_remove_card_sem={-967:0}, card={-961:-24}, ctx={-961:0}, ctx={-961:0}, last_index=1, ldv_dev_alloc_skb_14((unsigned int )size)={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=2048, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] ctx->skb = ldv_dev_alloc_skb_14((unsigned int )size) [L7850] EXPR ctx->skb VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={595:0}, add_remove_card_sem={-967:0}, card={-961:-24}, ctx={-961:0}, ctx={-961:0}, ctx->skb={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=2048, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7850] COND TRUE (unsigned long )ctx->skb == (unsigned long )((struct sk_buff *)0) [L7851] adapter->dev [L7853] return (-12); VAL [\old(last_index)=1, \old(size)=2048, \result=-12, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={595:0}, add_remove_card_sem={-967:0}, card={-961:-24}, ctx={-961:0}, ctx={-961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, size=2048, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] RET, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048)=-12, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] tmp = mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) [L8414] COND TRUE tmp != 0 [L8415] return (-1); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=4294967284, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8812] RET, EXPR mwifiex_usb_rx_init(adapter) [L8812] ret = mwifiex_usb_rx_init(adapter) [L8813] COND FALSE !(ret == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, ret=4294967295, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8817] return (ret); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={-967:0}, card={-961:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, ret=4294967295, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9023] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L9024] ldv_state_variable_1 = 1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9061] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L9062] CALL mwifiex_usb_cleanup_module() [L8908] int tmp ; [L8910] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9477] return __VERIFIER_nondet_int(); [L8910] RET, EXPR down_interruptible(& add_remove_card_sem) [L8910] tmp = down_interruptible(& add_remove_card_sem) [L8911] COND FALSE !(tmp == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2147483648, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8915] user_rmmod = 1U [L8916] CALL ldv_usb_deregister_18(& mwifiex_usb_driver) [L9235] FCALL usb_deregister(arg) [L9236] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, arg={-966:0}, arg={-966:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L8916] RET ldv_usb_deregister_18(& mwifiex_usb_driver) [L9062] RET mwifiex_usb_cleanup_module() [L9063] ldv_state_variable_0 = 2 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-962:0}, ldvarg4={0:0}, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9164] CALL ldv_check_final_state() [L9446] int tmp___7 ; [L9448] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L9337] return (last_index == 0); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9448] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L9448] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L9449] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, tmp___7=0, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9451] CALL ldv_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L7323] reach_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={167:166}, add_remove_card_sem={-967:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={-966:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={-969:0}, ref_cnt=0, set_impl={-961:0}, usb_counter=0, usb_ops={-965:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 679 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 105.2s, OverallIterations: 15, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 21.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 3 mSolverCounterUnknown, 7288 SdHoareTripleChecker+Valid, 17.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7120 mSDsluCounter, 74398 SdHoareTripleChecker+Invalid, 16.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 70 IncrementalHoareTripleChecker+Unchecked, 59385 mSDsCounter, 506 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1194 IncrementalHoareTripleChecker+Invalid, 1773 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 506 mSolverCounterUnsat, 15013 mSDtfsCounter, 1194 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3235 GetRequests, 3131 SyntacticMatches, 2 SemanticMatches, 102 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 76 ImplicationChecksByTransitivity, 8.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10336occurred in iteration=14, InterpolantAutomatonStates: 93, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.7s AutomataMinimizationTime, 14 MinimizatonAttempts, 609 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.7s SsaConstructionTime, 20.9s SatisfiabilityAnalysisTime, 30.5s InterpolantComputationTime, 1807 NumberOfCodeBlocks, 1791 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 3214 ConstructedInterpolants, 4 QuantifiedInterpolants, 4398 SizeOfPredicates, 53 NumberOfNonLiveVariables, 13975 ConjunctsInSsa, 117 ConjunctsInUnsatCore, 28 InterpolantComputations, 26 PerfectInterpolantSequences, 1958/1964 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 01:02:01,803 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample