./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0f8a17c6 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 00:30:44,980 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 00:30:44,983 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 00:30:45,006 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 00:30:45,006 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 00:30:45,007 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 00:30:45,008 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 00:30:45,009 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 00:30:45,010 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 00:30:45,013 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 00:30:45,014 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 00:30:45,016 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 00:30:45,016 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 00:30:45,017 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 00:30:45,019 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 00:30:45,019 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 00:30:45,020 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 00:30:45,021 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 00:30:45,022 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 00:30:45,025 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 00:30:45,028 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 00:30:45,032 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 00:30:45,032 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 00:30:45,033 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 00:30:45,035 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 00:30:45,039 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 00:30:45,040 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 00:30:45,040 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 00:30:45,041 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 00:30:45,041 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 00:30:45,041 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 00:30:45,042 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 00:30:45,042 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 00:30:45,043 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 00:30:45,043 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 00:30:45,045 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 00:30:45,045 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 00:30:45,046 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 00:30:45,046 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 00:30:45,047 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 00:30:45,047 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 00:30:45,048 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-17 00:30:45,061 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 00:30:45,063 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 00:30:45,064 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 00:30:45,064 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 00:30:45,065 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 00:30:45,065 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 00:30:45,066 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 00:30:45,066 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 00:30:45,066 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 00:30:45,066 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 00:30:45,067 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-17 00:30:45,067 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 00:30:45,067 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 00:30:45,067 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 00:30:45,067 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 00:30:45,068 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 00:30:45,068 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 00:30:45,068 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 00:30:45,068 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 00:30:45,068 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 00:30:45,068 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 00:30:45,069 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 00:30:45,069 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 00:30:45,069 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 00:30:45,069 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 00:30:45,069 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-17 00:30:45,069 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-17 00:30:45,069 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 00:30:45,070 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 00:30:45,070 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 00:30:45,070 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 00:30:45,070 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2021-11-17 00:30:45,251 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 00:30:45,276 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 00:30:45,278 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 00:30:45,279 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 00:30:45,279 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 00:30:45,280 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:30:45,338 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4440078de/2da955d89e0b49e3849d6ff63b4fd87a/FLAGfc2bd6d4a [2021-11-17 00:30:45,944 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 00:30:45,945 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:30:45,979 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4440078de/2da955d89e0b49e3849d6ff63b4fd87a/FLAGfc2bd6d4a [2021-11-17 00:30:46,318 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4440078de/2da955d89e0b49e3849d6ff63b4fd87a [2021-11-17 00:30:46,320 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 00:30:46,321 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 00:30:46,323 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 00:30:46,323 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 00:30:46,325 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 00:30:46,326 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 12:30:46" (1/1) ... [2021-11-17 00:30:46,327 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1190928f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:46, skipping insertion in model container [2021-11-17 00:30:46,327 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 12:30:46" (1/1) ... [2021-11-17 00:30:46,331 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 00:30:46,416 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 00:30:47,041 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-17 00:30:47,347 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 00:30:47,367 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 00:30:47,494 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-17 00:30:47,595 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 00:30:47,681 INFO L208 MainTranslator]: Completed translation [2021-11-17 00:30:47,682 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47 WrapperNode [2021-11-17 00:30:47,682 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 00:30:47,683 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 00:30:47,683 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 00:30:47,683 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 00:30:47,688 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,737 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,844 INFO L137 Inliner]: procedures = 163, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 3076 [2021-11-17 00:30:47,845 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 00:30:47,846 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 00:30:47,846 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 00:30:47,846 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 00:30:47,852 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,853 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,877 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,878 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,947 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,965 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,979 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:47,999 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 00:30:48,000 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 00:30:48,000 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 00:30:48,000 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 00:30:48,001 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (1/1) ... [2021-11-17 00:30:48,007 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 00:30:48,014 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:30:48,023 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 00:30:48,029 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 00:30:48,050 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-17 00:30:48,051 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-17 00:30:48,051 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2021-11-17 00:30:48,051 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2021-11-17 00:30:48,051 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2021-11-17 00:30:48,051 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2021-11-17 00:30:48,051 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2021-11-17 00:30:48,051 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2021-11-17 00:30:48,051 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-17 00:30:48,052 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2021-11-17 00:30:48,052 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2021-11-17 00:30:48,052 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 00:30:48,052 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 00:30:48,052 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-17 00:30:48,052 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-17 00:30:48,052 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 00:30:48,052 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 00:30:48,053 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-17 00:30:48,053 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 00:30:48,053 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 00:30:48,053 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-17 00:30:48,053 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-17 00:30:48,053 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-17 00:30:48,053 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-17 00:30:48,054 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 00:30:48,054 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 00:30:48,054 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-17 00:30:48,054 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-17 00:30:48,054 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 00:30:48,054 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 00:30:48,054 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 00:30:48,054 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 00:30:48,055 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-17 00:30:48,055 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-17 00:30:48,055 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 00:30:48,055 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 00:30:48,055 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-17 00:30:48,056 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-17 00:30:48,056 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-17 00:30:48,056 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-17 00:30:48,056 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 00:30:48,056 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 00:30:48,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-17 00:30:48,056 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 00:30:48,056 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 00:30:48,057 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2021-11-17 00:30:48,057 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2021-11-17 00:30:48,057 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-17 00:30:48,057 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-17 00:30:48,057 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2021-11-17 00:30:48,057 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2021-11-17 00:30:48,058 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 00:30:48,058 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 00:30:48,058 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-17 00:30:48,058 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-17 00:30:48,058 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 00:30:48,059 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 00:30:48,059 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 00:30:48,059 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 00:30:48,060 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 00:30:48,060 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-11-17 00:30:48,060 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-11-17 00:30:48,060 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-17 00:30:48,060 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-17 00:30:48,061 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 00:30:48,061 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-17 00:30:48,061 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-17 00:30:48,061 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-17 00:30:48,061 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-17 00:30:48,061 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 00:30:48,061 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 00:30:48,061 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 00:30:48,062 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 00:30:48,062 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-17 00:30:48,062 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-17 00:30:48,062 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2021-11-17 00:30:48,062 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2021-11-17 00:30:48,063 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 00:30:48,063 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-17 00:30:48,063 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-17 00:30:48,063 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-17 00:30:48,063 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-17 00:30:48,063 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 00:30:48,063 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 00:30:48,063 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2021-11-17 00:30:48,064 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2021-11-17 00:30:48,064 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-17 00:30:48,064 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-17 00:30:48,064 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-17 00:30:48,064 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-17 00:30:48,065 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-17 00:30:48,065 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-17 00:30:48,065 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-17 00:30:48,065 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-17 00:30:48,065 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-17 00:30:48,065 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-17 00:30:48,066 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-17 00:30:48,066 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-17 00:30:48,066 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-17 00:30:48,066 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-17 00:30:48,067 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-17 00:30:48,067 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 00:30:48,067 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 00:30:48,067 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-17 00:30:48,067 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-17 00:30:48,562 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 00:30:48,564 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 00:30:48,812 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 00:30:49,283 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-11-17 00:30:54,301 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 00:30:54,317 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 00:30:54,317 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-11-17 00:30:54,321 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:30:54 BoogieIcfgContainer [2021-11-17 00:30:54,321 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 00:30:54,322 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 00:30:54,322 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 00:30:54,324 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 00:30:54,325 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 12:30:46" (1/3) ... [2021-11-17 00:30:54,326 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@73986948 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 12:30:54, skipping insertion in model container [2021-11-17 00:30:54,328 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:30:47" (2/3) ... [2021-11-17 00:30:54,328 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@73986948 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 12:30:54, skipping insertion in model container [2021-11-17 00:30:54,328 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:30:54" (3/3) ... [2021-11-17 00:30:54,329 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:30:54,334 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 00:30:54,334 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 00:30:54,377 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 00:30:54,383 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 00:30:54,383 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 00:30:54,433 INFO L276 IsEmpty]: Start isEmpty. Operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2021-11-17 00:30:54,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-17 00:30:54,440 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:30:54,441 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:30:54,441 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:30:54,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:30:54,445 INFO L85 PathProgramCache]: Analyzing trace with hash -967497407, now seen corresponding path program 1 times [2021-11-17 00:30:54,450 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:30:54,451 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [253207952] [2021-11-17 00:30:54,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:30:54,452 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:30:54,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:30:54,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:30:54,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:30:54,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:30:54,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:30:54,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:30:54,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:30:54,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:30:54,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:30:54,841 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 00:30:54,842 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:30:54,842 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [253207952] [2021-11-17 00:30:54,843 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [253207952] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:30:54,843 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:30:54,843 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 00:30:54,844 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405365976] [2021-11-17 00:30:54,844 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:30:54,847 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:30:54,847 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:30:54,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:30:54,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:30:54,870 INFO L87 Difference]: Start difference. First operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 00:30:57,357 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:30:59,384 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:02,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:31:02,622 INFO L93 Difference]: Finished difference Result 2754 states and 4123 transitions. [2021-11-17 00:31:02,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:31:02,624 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2021-11-17 00:31:02,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:31:02,646 INFO L225 Difference]: With dead ends: 2754 [2021-11-17 00:31:02,646 INFO L226 Difference]: Without dead ends: 1880 [2021-11-17 00:31:02,657 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:31:02,659 INFO L933 BasicCegarLoop]: 1335 mSDtfsCounter, 1894 mSDsluCounter, 2184 mSDsCounter, 0 mSdLazyCounter, 1423 mSolverCounterSat, 1012 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2045 SdHoareTripleChecker+Valid, 3519 SdHoareTripleChecker+Invalid, 2437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1012 IncrementalHoareTripleChecker+Valid, 1423 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.5s IncrementalHoareTripleChecker+Time [2021-11-17 00:31:02,660 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2045 Valid, 3519 Invalid, 2437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1012 Valid, 1423 Invalid, 2 Unknown, 0 Unchecked, 7.5s Time] [2021-11-17 00:31:02,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1880 states. [2021-11-17 00:31:02,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1880 to 1612. [2021-11-17 00:31:02,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1612 states, 1197 states have (on average 1.3751044277360067) internal successors, (1646), 1229 states have internal predecessors, (1646), 332 states have call successors, (332), 83 states have call predecessors, (332), 82 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2021-11-17 00:31:02,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1612 states to 1612 states and 2305 transitions. [2021-11-17 00:31:02,772 INFO L78 Accepts]: Start accepts. Automaton has 1612 states and 2305 transitions. Word has length 44 [2021-11-17 00:31:02,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:31:02,772 INFO L470 AbstractCegarLoop]: Abstraction has 1612 states and 2305 transitions. [2021-11-17 00:31:02,773 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 00:31:02,773 INFO L276 IsEmpty]: Start isEmpty. Operand 1612 states and 2305 transitions. [2021-11-17 00:31:02,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-11-17 00:31:02,776 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:31:02,776 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:31:02,777 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-17 00:31:02,777 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:31:02,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:31:02,777 INFO L85 PathProgramCache]: Analyzing trace with hash -1415687837, now seen corresponding path program 1 times [2021-11-17 00:31:02,778 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:31:02,778 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [324441667] [2021-11-17 00:31:02,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:31:02,778 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:31:02,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:02,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:31:02,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:02,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:31:02,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:02,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:31:02,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:02,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:31:02,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:02,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 00:31:02,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:02,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-17 00:31:02,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:02,973 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-17 00:31:02,974 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:31:02,974 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [324441667] [2021-11-17 00:31:02,974 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [324441667] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:31:02,974 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:31:02,974 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 00:31:02,974 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2094308166] [2021-11-17 00:31:02,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:31:02,975 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:31:02,976 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:31:02,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:31:02,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:31:02,976 INFO L87 Difference]: Start difference. First operand 1612 states and 2305 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:06,265 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:08,286 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:11,119 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:13,140 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:15,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:31:15,379 INFO L93 Difference]: Finished difference Result 5349 states and 7945 transitions. [2021-11-17 00:31:15,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:31:15,379 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2021-11-17 00:31:15,380 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:31:15,396 INFO L225 Difference]: With dead ends: 5349 [2021-11-17 00:31:15,396 INFO L226 Difference]: Without dead ends: 3748 [2021-11-17 00:31:15,401 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:31:15,402 INFO L933 BasicCegarLoop]: 1360 mSDtfsCounter, 1948 mSDsluCounter, 2238 mSDsCounter, 0 mSdLazyCounter, 1432 mSolverCounterSat, 1010 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2078 SdHoareTripleChecker+Valid, 3598 SdHoareTripleChecker+Invalid, 2446 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1010 IncrementalHoareTripleChecker+Valid, 1432 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.2s IncrementalHoareTripleChecker+Time [2021-11-17 00:31:15,403 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2078 Valid, 3598 Invalid, 2446 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1010 Valid, 1432 Invalid, 4 Unknown, 0 Unchecked, 12.2s Time] [2021-11-17 00:31:15,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3748 states. [2021-11-17 00:31:15,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3748 to 3286. [2021-11-17 00:31:15,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3286 states, 2434 states have (on average 1.3697617091207888) internal successors, (3334), 2504 states have internal predecessors, (3334), 671 states have call successors, (671), 165 states have call predecessors, (671), 180 states have return successors, (762), 642 states have call predecessors, (762), 666 states have call successors, (762) [2021-11-17 00:31:15,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3286 states to 3286 states and 4767 transitions. [2021-11-17 00:31:15,523 INFO L78 Accepts]: Start accepts. Automaton has 3286 states and 4767 transitions. Word has length 61 [2021-11-17 00:31:15,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:31:15,524 INFO L470 AbstractCegarLoop]: Abstraction has 3286 states and 4767 transitions. [2021-11-17 00:31:15,524 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:15,524 INFO L276 IsEmpty]: Start isEmpty. Operand 3286 states and 4767 transitions. [2021-11-17 00:31:15,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-11-17 00:31:15,528 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:31:15,529 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:31:15,530 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-17 00:31:15,532 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:31:15,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:31:15,533 INFO L85 PathProgramCache]: Analyzing trace with hash -937016713, now seen corresponding path program 1 times [2021-11-17 00:31:15,533 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:31:15,534 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1730969229] [2021-11-17 00:31:15,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:31:15,536 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:31:15,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:15,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:31:15,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:15,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:31:15,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:15,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:31:15,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:15,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:31:15,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:15,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 00:31:15,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:15,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-17 00:31:15,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:15,784 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-17 00:31:15,784 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:31:15,784 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1730969229] [2021-11-17 00:31:15,785 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1730969229] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:31:15,785 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:31:15,785 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 00:31:15,785 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084284704] [2021-11-17 00:31:15,785 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:31:15,786 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:31:15,786 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:31:15,786 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:31:15,786 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:31:15,787 INFO L87 Difference]: Start difference. First operand 3286 states and 4767 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:18,027 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:20,280 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:22,304 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:25,838 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:27,855 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:29,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:31:29,420 INFO L93 Difference]: Finished difference Result 10731 states and 16197 transitions. [2021-11-17 00:31:29,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:31:29,420 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 62 [2021-11-17 00:31:29,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:31:29,456 INFO L225 Difference]: With dead ends: 10731 [2021-11-17 00:31:29,456 INFO L226 Difference]: Without dead ends: 7456 [2021-11-17 00:31:29,470 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:31:29,475 INFO L933 BasicCegarLoop]: 1300 mSDtfsCounter, 2006 mSDsluCounter, 2142 mSDsCounter, 0 mSdLazyCounter, 1396 mSolverCounterSat, 1034 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2146 SdHoareTripleChecker+Valid, 3442 SdHoareTripleChecker+Invalid, 2435 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1034 IncrementalHoareTripleChecker+Valid, 1396 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.4s IncrementalHoareTripleChecker+Time [2021-11-17 00:31:29,476 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2146 Valid, 3442 Invalid, 2435 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1034 Valid, 1396 Invalid, 5 Unknown, 0 Unchecked, 13.4s Time] [2021-11-17 00:31:29,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7456 states. [2021-11-17 00:31:29,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7456 to 6627. [2021-11-17 00:31:29,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6627 states, 4901 states have (on average 1.3650275453988983) internal successors, (6690), 5047 states have internal predecessors, (6690), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-11-17 00:31:29,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6627 states to 6627 states and 9741 transitions. [2021-11-17 00:31:29,720 INFO L78 Accepts]: Start accepts. Automaton has 6627 states and 9741 transitions. Word has length 62 [2021-11-17 00:31:29,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:31:29,721 INFO L470 AbstractCegarLoop]: Abstraction has 6627 states and 9741 transitions. [2021-11-17 00:31:29,722 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:29,722 INFO L276 IsEmpty]: Start isEmpty. Operand 6627 states and 9741 transitions. [2021-11-17 00:31:29,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-17 00:31:29,724 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:31:29,724 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:31:29,724 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-17 00:31:29,724 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:31:29,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:31:29,725 INFO L85 PathProgramCache]: Analyzing trace with hash 1016891110, now seen corresponding path program 1 times [2021-11-17 00:31:29,725 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:31:29,725 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1638206580] [2021-11-17 00:31:29,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:31:29,725 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:31:29,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:29,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:31:29,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:29,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:31:29,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:29,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:31:29,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:29,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:31:29,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:29,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 00:31:29,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:29,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-17 00:31:29,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:29,901 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-17 00:31:29,901 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:31:29,901 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1638206580] [2021-11-17 00:31:29,901 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1638206580] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:31:29,902 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:31:29,902 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 00:31:29,902 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134163790] [2021-11-17 00:31:29,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:31:29,902 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:31:29,902 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:31:29,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:31:29,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:31:29,903 INFO L87 Difference]: Start difference. First operand 6627 states and 9741 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:32,245 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:34,266 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:37,804 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:39,827 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:41,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:31:41,293 INFO L93 Difference]: Finished difference Result 7454 states and 11168 transitions. [2021-11-17 00:31:41,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:31:41,294 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 63 [2021-11-17 00:31:41,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:31:41,330 INFO L225 Difference]: With dead ends: 7454 [2021-11-17 00:31:41,330 INFO L226 Difference]: Without dead ends: 7451 [2021-11-17 00:31:41,335 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:31:41,335 INFO L933 BasicCegarLoop]: 1304 mSDtfsCounter, 2003 mSDsluCounter, 2146 mSDsCounter, 0 mSdLazyCounter, 1387 mSolverCounterSat, 1028 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2143 SdHoareTripleChecker+Valid, 3450 SdHoareTripleChecker+Invalid, 2419 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1028 IncrementalHoareTripleChecker+Valid, 1387 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.2s IncrementalHoareTripleChecker+Time [2021-11-17 00:31:41,336 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2143 Valid, 3450 Invalid, 2419 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1028 Valid, 1387 Invalid, 4 Unknown, 0 Unchecked, 11.2s Time] [2021-11-17 00:31:41,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7451 states. [2021-11-17 00:31:41,546 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7451 to 6628. [2021-11-17 00:31:41,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6628 states, 4902 states have (on average 1.364953080375357) internal successors, (6691), 5048 states have internal predecessors, (6691), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-11-17 00:31:41,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6628 states to 6628 states and 9742 transitions. [2021-11-17 00:31:41,587 INFO L78 Accepts]: Start accepts. Automaton has 6628 states and 9742 transitions. Word has length 63 [2021-11-17 00:31:41,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:31:41,589 INFO L470 AbstractCegarLoop]: Abstraction has 6628 states and 9742 transitions. [2021-11-17 00:31:41,589 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:41,590 INFO L276 IsEmpty]: Start isEmpty. Operand 6628 states and 9742 transitions. [2021-11-17 00:31:41,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-11-17 00:31:41,592 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:31:41,592 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:31:41,592 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-17 00:31:41,592 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:31:41,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:31:41,593 INFO L85 PathProgramCache]: Analyzing trace with hash 1458496346, now seen corresponding path program 1 times [2021-11-17 00:31:41,593 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:31:41,593 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [798056737] [2021-11-17 00:31:41,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:31:41,593 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:31:41,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:41,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:31:41,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:41,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:31:41,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:41,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:31:41,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:41,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:31:41,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:41,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 00:31:41,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:41,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-17 00:31:41,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:41,741 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-17 00:31:41,741 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:31:41,741 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [798056737] [2021-11-17 00:31:41,742 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [798056737] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:31:41,742 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:31:41,742 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 00:31:41,742 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [179236914] [2021-11-17 00:31:41,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:31:41,744 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:31:41,745 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:31:41,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:31:41,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:31:41,745 INFO L87 Difference]: Start difference. First operand 6628 states and 9742 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:44,584 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:46,609 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:48,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:31:48,413 INFO L93 Difference]: Finished difference Result 7450 states and 11164 transitions. [2021-11-17 00:31:48,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 00:31:48,413 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 64 [2021-11-17 00:31:48,414 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:31:48,450 INFO L225 Difference]: With dead ends: 7450 [2021-11-17 00:31:48,450 INFO L226 Difference]: Without dead ends: 7447 [2021-11-17 00:31:48,453 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:31:48,454 INFO L933 BasicCegarLoop]: 1125 mSDtfsCounter, 1541 mSDsluCounter, 1088 mSDsCounter, 0 mSdLazyCounter, 791 mSolverCounterSat, 573 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1683 SdHoareTripleChecker+Valid, 2213 SdHoareTripleChecker+Invalid, 1366 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 573 IncrementalHoareTripleChecker+Valid, 791 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.5s IncrementalHoareTripleChecker+Time [2021-11-17 00:31:48,454 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1683 Valid, 2213 Invalid, 1366 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [573 Valid, 791 Invalid, 2 Unknown, 0 Unchecked, 6.5s Time] [2021-11-17 00:31:48,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7447 states. [2021-11-17 00:31:48,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7447 to 6627. [2021-11-17 00:31:48,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6627 states, 4902 states have (on average 1.364749082007344) internal successors, (6690), 5047 states have internal predecessors, (6690), 1348 states have call successors, (1348), 329 states have call predecessors, (1348), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-11-17 00:31:48,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6627 states to 6627 states and 9740 transitions. [2021-11-17 00:31:48,736 INFO L78 Accepts]: Start accepts. Automaton has 6627 states and 9740 transitions. Word has length 64 [2021-11-17 00:31:48,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:31:48,736 INFO L470 AbstractCegarLoop]: Abstraction has 6627 states and 9740 transitions. [2021-11-17 00:31:48,736 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:48,736 INFO L276 IsEmpty]: Start isEmpty. Operand 6627 states and 9740 transitions. [2021-11-17 00:31:48,737 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-17 00:31:48,737 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:31:48,737 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:31:48,737 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-17 00:31:48,738 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:31:48,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:31:48,738 INFO L85 PathProgramCache]: Analyzing trace with hash -2031605655, now seen corresponding path program 1 times [2021-11-17 00:31:48,738 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:31:48,738 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1911732242] [2021-11-17 00:31:48,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:31:48,738 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:31:48,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:48,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:31:48,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:48,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:31:48,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:48,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:31:48,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:48,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:31:48,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:48,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 00:31:48,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:48,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-17 00:31:48,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:48,964 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-17 00:31:48,965 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:31:48,965 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1911732242] [2021-11-17 00:31:48,965 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1911732242] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:31:48,965 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:31:48,965 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 00:31:48,965 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631612535] [2021-11-17 00:31:48,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:31:48,966 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:31:48,966 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:31:48,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:31:48,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:31:48,967 INFO L87 Difference]: Start difference. First operand 6627 states and 9740 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:51,245 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:53,277 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:31:55,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:31:55,150 INFO L93 Difference]: Finished difference Result 7449 states and 11162 transitions. [2021-11-17 00:31:55,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 00:31:55,150 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2021-11-17 00:31:55,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:31:55,181 INFO L225 Difference]: With dead ends: 7449 [2021-11-17 00:31:55,181 INFO L226 Difference]: Without dead ends: 7417 [2021-11-17 00:31:55,188 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:31:55,189 INFO L933 BasicCegarLoop]: 1130 mSDtfsCounter, 1537 mSDsluCounter, 1090 mSDsCounter, 0 mSdLazyCounter, 797 mSolverCounterSat, 571 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1674 SdHoareTripleChecker+Valid, 2220 SdHoareTripleChecker+Invalid, 1370 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 571 IncrementalHoareTripleChecker+Valid, 797 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2021-11-17 00:31:55,189 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1674 Valid, 2220 Invalid, 1370 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [571 Valid, 797 Invalid, 2 Unknown, 0 Unchecked, 6.0s Time] [2021-11-17 00:31:55,194 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7417 states. [2021-11-17 00:31:55,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7417 to 6597. [2021-11-17 00:31:55,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6597 states, 4875 states have (on average 1.3645128205128205) internal successors, (6652), 5019 states have internal predecessors, (6652), 1345 states have call successors, (1345), 329 states have call predecessors, (1345), 376 states have return successors, (1696), 1302 states have call predecessors, (1696), 1342 states have call successors, (1696) [2021-11-17 00:31:55,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6597 states to 6597 states and 9693 transitions. [2021-11-17 00:31:55,421 INFO L78 Accepts]: Start accepts. Automaton has 6597 states and 9693 transitions. Word has length 65 [2021-11-17 00:31:55,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:31:55,422 INFO L470 AbstractCegarLoop]: Abstraction has 6597 states and 9693 transitions. [2021-11-17 00:31:55,422 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-17 00:31:55,423 INFO L276 IsEmpty]: Start isEmpty. Operand 6597 states and 9693 transitions. [2021-11-17 00:31:55,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-11-17 00:31:55,426 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:31:55,427 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:31:55,427 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-17 00:31:55,427 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:31:55,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:31:55,427 INFO L85 PathProgramCache]: Analyzing trace with hash 1428627121, now seen corresponding path program 1 times [2021-11-17 00:31:55,428 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:31:55,428 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1808255620] [2021-11-17 00:31:55,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:31:55,428 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:31:55,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:31:55,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:31:55,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:31:55,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:31:55,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-11-17 00:31:55,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:31:55,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 00:31:55,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-17 00:31:55,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-11-17 00:31:55,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:31:55,575 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-17 00:31:55,575 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:31:55,576 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1808255620] [2021-11-17 00:31:55,576 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1808255620] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:31:55,576 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:31:55,576 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-17 00:31:55,576 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1744159657] [2021-11-17 00:31:55,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:31:55,577 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-17 00:31:55,577 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:31:55,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-17 00:31:55,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:31:55,578 INFO L87 Difference]: Start difference. First operand 6597 states and 9693 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 00:31:58,141 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:00,165 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:03,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:32:03,584 INFO L93 Difference]: Finished difference Result 20473 states and 30444 transitions. [2021-11-17 00:32:03,593 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-17 00:32:03,595 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-11-17 00:32:03,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:32:03,658 INFO L225 Difference]: With dead ends: 20473 [2021-11-17 00:32:03,658 INFO L226 Difference]: Without dead ends: 13887 [2021-11-17 00:32:03,684 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2021-11-17 00:32:03,685 INFO L933 BasicCegarLoop]: 1522 mSDtfsCounter, 2133 mSDsluCounter, 2541 mSDsCounter, 0 mSdLazyCounter, 1545 mSolverCounterSat, 1595 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2271 SdHoareTripleChecker+Valid, 4063 SdHoareTripleChecker+Invalid, 3142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1595 IncrementalHoareTripleChecker+Valid, 1545 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.5s IncrementalHoareTripleChecker+Time [2021-11-17 00:32:03,685 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2271 Valid, 4063 Invalid, 3142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1595 Valid, 1545 Invalid, 2 Unknown, 0 Unchecked, 7.5s Time] [2021-11-17 00:32:03,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13887 states. [2021-11-17 00:32:04,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13887 to 12437. [2021-11-17 00:32:04,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12437 states, 9104 states have (on average 1.3474297012302285) internal successors, (12267), 9423 states have internal predecessors, (12267), 2516 states have call successors, (2516), 623 states have call predecessors, (2516), 816 states have return successors, (3667), 2490 states have call predecessors, (3667), 2513 states have call successors, (3667) [2021-11-17 00:32:04,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12437 states to 12437 states and 18450 transitions. [2021-11-17 00:32:04,125 INFO L78 Accepts]: Start accepts. Automaton has 12437 states and 18450 transitions. Word has length 98 [2021-11-17 00:32:04,125 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:32:04,125 INFO L470 AbstractCegarLoop]: Abstraction has 12437 states and 18450 transitions. [2021-11-17 00:32:04,125 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 00:32:04,126 INFO L276 IsEmpty]: Start isEmpty. Operand 12437 states and 18450 transitions. [2021-11-17 00:32:04,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-11-17 00:32:04,132 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:32:04,133 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:32:04,133 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-17 00:32:04,133 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:32:04,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:32:04,133 INFO L85 PathProgramCache]: Analyzing trace with hash -173781947, now seen corresponding path program 1 times [2021-11-17 00:32:04,134 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:32:04,134 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [711092744] [2021-11-17 00:32:04,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:32:04,134 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:32:04,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:04,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:32:04,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:32:04,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:32:04,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 00:32:04,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-17 00:32:04,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-11-17 00:32:04,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-11-17 00:32:04,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-11-17 00:32:04,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:32:04,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 00:32:04,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:04,418 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2021-11-17 00:32:04,419 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:32:04,419 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [711092744] [2021-11-17 00:32:04,419 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [711092744] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:32:04,419 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:32:04,419 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-17 00:32:04,419 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1852645058] [2021-11-17 00:32:04,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:32:04,420 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-17 00:32:04,420 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:32:04,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-17 00:32:04,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-11-17 00:32:04,420 INFO L87 Difference]: Start difference. First operand 12437 states and 18450 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-17 00:32:06,435 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:09,045 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:11,071 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:13,097 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:16,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:32:16,678 INFO L93 Difference]: Finished difference Result 26283 states and 39189 transitions. [2021-11-17 00:32:16,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-17 00:32:16,679 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) Word has length 124 [2021-11-17 00:32:16,680 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:32:16,732 INFO L225 Difference]: With dead ends: 26283 [2021-11-17 00:32:16,732 INFO L226 Difference]: Without dead ends: 13868 [2021-11-17 00:32:16,773 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2021-11-17 00:32:16,774 INFO L933 BasicCegarLoop]: 1146 mSDtfsCounter, 680 mSDsluCounter, 5530 mSDsCounter, 0 mSdLazyCounter, 2145 mSolverCounterSat, 700 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 705 SdHoareTripleChecker+Valid, 6676 SdHoareTripleChecker+Invalid, 2849 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 700 IncrementalHoareTripleChecker+Valid, 2145 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.7s IncrementalHoareTripleChecker+Time [2021-11-17 00:32:16,774 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [705 Valid, 6676 Invalid, 2849 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [700 Valid, 2145 Invalid, 4 Unknown, 0 Unchecked, 11.7s Time] [2021-11-17 00:32:16,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13868 states. [2021-11-17 00:32:17,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13868 to 12457. [2021-11-17 00:32:17,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12457 states, 9120 states have (on average 1.3468201754385964) internal successors, (12283), 9435 states have internal predecessors, (12283), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2021-11-17 00:32:17,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12457 states to 12457 states and 18474 transitions. [2021-11-17 00:32:17,267 INFO L78 Accepts]: Start accepts. Automaton has 12457 states and 18474 transitions. Word has length 124 [2021-11-17 00:32:17,268 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:32:17,268 INFO L470 AbstractCegarLoop]: Abstraction has 12457 states and 18474 transitions. [2021-11-17 00:32:17,268 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-17 00:32:17,268 INFO L276 IsEmpty]: Start isEmpty. Operand 12457 states and 18474 transitions. [2021-11-17 00:32:17,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2021-11-17 00:32:17,276 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:32:17,276 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:32:17,276 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-17 00:32:17,276 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:32:17,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:32:17,277 INFO L85 PathProgramCache]: Analyzing trace with hash 582365067, now seen corresponding path program 1 times [2021-11-17 00:32:17,277 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:32:17,277 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121401258] [2021-11-17 00:32:17,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:32:17,278 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:32:17,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:17,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:32:17,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:32:17,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:32:17,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 00:32:17,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-17 00:32:17,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-11-17 00:32:17,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-11-17 00:32:17,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-11-17 00:32:17,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:32:17,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:17,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-17 00:32:17,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:17,566 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-11-17 00:32:17,567 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:32:17,567 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121401258] [2021-11-17 00:32:17,567 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121401258] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:32:17,567 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:32:17,567 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 00:32:17,567 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398821059] [2021-11-17 00:32:17,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:32:17,568 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 00:32:17,568 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:32:17,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 00:32:17,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:32:17,569 INFO L87 Difference]: Start difference. First operand 12457 states and 18474 transitions. Second operand has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:32:19,952 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:21,985 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:24,010 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:27,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:32:27,177 INFO L93 Difference]: Finished difference Result 26292 states and 39150 transitions. [2021-11-17 00:32:27,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-17 00:32:27,178 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 130 [2021-11-17 00:32:27,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:32:27,232 INFO L225 Difference]: With dead ends: 26292 [2021-11-17 00:32:27,233 INFO L226 Difference]: Without dead ends: 13838 [2021-11-17 00:32:27,263 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2021-11-17 00:32:27,264 INFO L933 BasicCegarLoop]: 1145 mSDtfsCounter, 678 mSDsluCounter, 4486 mSDsCounter, 0 mSdLazyCounter, 1918 mSolverCounterSat, 705 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 703 SdHoareTripleChecker+Valid, 5631 SdHoareTripleChecker+Invalid, 2626 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 705 IncrementalHoareTripleChecker+Valid, 1918 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.2s IncrementalHoareTripleChecker+Time [2021-11-17 00:32:27,264 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [703 Valid, 5631 Invalid, 2626 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [705 Valid, 1918 Invalid, 3 Unknown, 0 Unchecked, 9.2s Time] [2021-11-17 00:32:27,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13838 states. [2021-11-17 00:32:27,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13838 to 12466. [2021-11-17 00:32:27,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12466 states, 9129 states have (on average 1.346478256106912) internal successors, (12292), 9444 states have internal predecessors, (12292), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2021-11-17 00:32:27,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12466 states to 12466 states and 18483 transitions. [2021-11-17 00:32:27,748 INFO L78 Accepts]: Start accepts. Automaton has 12466 states and 18483 transitions. Word has length 130 [2021-11-17 00:32:27,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:32:27,749 INFO L470 AbstractCegarLoop]: Abstraction has 12466 states and 18483 transitions. [2021-11-17 00:32:27,749 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:32:27,749 INFO L276 IsEmpty]: Start isEmpty. Operand 12466 states and 18483 transitions. [2021-11-17 00:32:27,756 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2021-11-17 00:32:27,757 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:32:27,757 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:32:27,757 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-17 00:32:27,757 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:32:27,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:32:27,758 INFO L85 PathProgramCache]: Analyzing trace with hash -413463987, now seen corresponding path program 1 times [2021-11-17 00:32:27,758 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:32:27,758 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725361421] [2021-11-17 00:32:27,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:32:27,758 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:32:27,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:27,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:32:27,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:32:27,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:32:27,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-17 00:32:27,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-17 00:32:27,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-17 00:32:27,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:27,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-17 00:32:27,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:28,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-17 00:32:28,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:28,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:32:28,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:28,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:28,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:28,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-17 00:32:28,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:28,038 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-11-17 00:32:28,038 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:32:28,039 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1725361421] [2021-11-17 00:32:28,039 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1725361421] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 00:32:28,039 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [127531700] [2021-11-17 00:32:28,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:32:28,039 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:32:28,039 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:32:28,041 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 00:32:28,045 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-17 00:32:28,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:28,466 INFO L263 TraceCheckSpWp]: Trace formula consists of 1850 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-17 00:32:28,475 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:32:28,698 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2021-11-17 00:32:28,699 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 00:32:28,699 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [127531700] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:32:28,699 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 00:32:28,699 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2021-11-17 00:32:28,699 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1569185577] [2021-11-17 00:32:28,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:32:28,700 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:32:28,700 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:32:28,700 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:32:28,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2021-11-17 00:32:28,700 INFO L87 Difference]: Start difference. First operand 12466 states and 18483 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:32:29,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:32:29,790 INFO L93 Difference]: Finished difference Result 20320 states and 30035 transitions. [2021-11-17 00:32:29,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 00:32:29,790 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 131 [2021-11-17 00:32:29,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:32:29,823 INFO L225 Difference]: With dead ends: 20320 [2021-11-17 00:32:29,823 INFO L226 Difference]: Without dead ends: 7867 [2021-11-17 00:32:29,851 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2021-11-17 00:32:29,852 INFO L933 BasicCegarLoop]: 1195 mSDtfsCounter, 38 mSDsluCounter, 3576 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4771 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-17 00:32:29,853 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 4771 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-17 00:32:29,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7867 states. [2021-11-17 00:32:30,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7867 to 7640. [2021-11-17 00:32:30,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7640 states, 5599 states have (on average 1.342025361671727) internal successors, (7514), 5793 states have internal predecessors, (7514), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1510 states have call predecessors, (2172), 1530 states have call successors, (2172) [2021-11-17 00:32:30,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7640 states to 7640 states and 11219 transitions. [2021-11-17 00:32:30,166 INFO L78 Accepts]: Start accepts. Automaton has 7640 states and 11219 transitions. Word has length 131 [2021-11-17 00:32:30,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:32:30,167 INFO L470 AbstractCegarLoop]: Abstraction has 7640 states and 11219 transitions. [2021-11-17 00:32:30,167 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:32:30,167 INFO L276 IsEmpty]: Start isEmpty. Operand 7640 states and 11219 transitions. [2021-11-17 00:32:30,175 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2021-11-17 00:32:30,176 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:32:30,176 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:32:30,213 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-11-17 00:32:30,381 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-17 00:32:30,382 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:32:30,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:32:30,382 INFO L85 PathProgramCache]: Analyzing trace with hash 1984420258, now seen corresponding path program 1 times [2021-11-17 00:32:30,382 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:32:30,382 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422370021] [2021-11-17 00:32:30,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:32:30,382 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:32:30,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:30,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:32:30,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:32:30,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:32:30,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-17 00:32:30,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:32:30,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-17 00:32:30,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:32:30,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-17 00:32:30,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-17 00:32:30,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-17 00:32:30,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-11-17 00:32:30,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-11-17 00:32:30,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2021-11-17 00:32:30,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:30,561 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2021-11-17 00:32:30,561 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:32:30,562 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422370021] [2021-11-17 00:32:30,562 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422370021] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:32:30,562 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:32:30,562 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-17 00:32:30,562 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1741213338] [2021-11-17 00:32:30,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:32:30,563 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-17 00:32:30,563 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:32:30,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-17 00:32:30,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:32:30,564 INFO L87 Difference]: Start difference. First operand 7640 states and 11219 transitions. Second operand has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:32:32,372 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.68s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:34,604 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:36,638 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:38,669 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:40,970 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:43,002 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:45,037 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:50,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:32:50,403 INFO L93 Difference]: Finished difference Result 22101 states and 33866 transitions. [2021-11-17 00:32:50,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 00:32:50,403 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 135 [2021-11-17 00:32:50,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:32:50,460 INFO L225 Difference]: With dead ends: 22101 [2021-11-17 00:32:50,460 INFO L226 Difference]: Without dead ends: 13897 [2021-11-17 00:32:50,483 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=88, Invalid=218, Unknown=0, NotChecked=0, Total=306 [2021-11-17 00:32:50,484 INFO L933 BasicCegarLoop]: 1630 mSDtfsCounter, 2449 mSDsluCounter, 4055 mSDsCounter, 0 mSdLazyCounter, 2926 mSolverCounterSat, 1768 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2603 SdHoareTripleChecker+Valid, 5685 SdHoareTripleChecker+Invalid, 4700 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1768 IncrementalHoareTripleChecker+Valid, 2926 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.3s IncrementalHoareTripleChecker+Time [2021-11-17 00:32:50,484 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2603 Valid, 5685 Invalid, 4700 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1768 Valid, 2926 Invalid, 6 Unknown, 0 Unchecked, 19.3s Time] [2021-11-17 00:32:50,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13897 states. [2021-11-17 00:32:50,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13897 to 11472. [2021-11-17 00:32:50,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11472 states, 8339 states have (on average 1.337570452092577) internal successors, (11154), 8682 states have internal predecessors, (11154), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2306 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-11-17 00:32:50,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11472 states to 11472 states and 17695 transitions. [2021-11-17 00:32:50,949 INFO L78 Accepts]: Start accepts. Automaton has 11472 states and 17695 transitions. Word has length 135 [2021-11-17 00:32:50,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:32:50,950 INFO L470 AbstractCegarLoop]: Abstraction has 11472 states and 17695 transitions. [2021-11-17 00:32:50,950 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:32:50,950 INFO L276 IsEmpty]: Start isEmpty. Operand 11472 states and 17695 transitions. [2021-11-17 00:32:50,955 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2021-11-17 00:32:50,955 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:32:50,955 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:32:50,956 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-17 00:32:50,956 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:32:50,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:32:50,956 INFO L85 PathProgramCache]: Analyzing trace with hash 2017702408, now seen corresponding path program 1 times [2021-11-17 00:32:50,956 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:32:50,956 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498825608] [2021-11-17 00:32:50,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:32:50,957 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:32:51,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:51,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:32:51,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:32:51,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:32:51,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-17 00:32:51,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-17 00:32:51,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-11-17 00:32:51,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-17 00:32:51,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-11-17 00:32:51,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-11-17 00:32:51,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:32:51,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:32:51,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-17 00:32:51,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,250 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-11-17 00:32:51,250 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:32:51,250 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498825608] [2021-11-17 00:32:51,250 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498825608] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 00:32:51,251 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [880177453] [2021-11-17 00:32:51,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:32:51,251 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 00:32:51,251 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:32:51,252 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 00:32:51,255 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-17 00:32:51,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:32:51,828 INFO L263 TraceCheckSpWp]: Trace formula consists of 1880 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-17 00:32:51,832 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:32:52,099 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2021-11-17 00:32:52,100 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:32:52,508 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-11-17 00:32:52,509 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [880177453] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 00:32:52,509 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 00:32:52,509 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2021-11-17 00:32:52,509 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26674152] [2021-11-17 00:32:52,509 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 00:32:52,510 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-17 00:32:52,510 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:32:52,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-17 00:32:52,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=141, Unknown=0, NotChecked=0, Total=182 [2021-11-17 00:32:52,510 INFO L87 Difference]: Start difference. First operand 11472 states and 17695 transitions. Second operand has 14 states, 14 states have (on average 8.571428571428571) internal successors, (120), 10 states have internal predecessors, (120), 2 states have call successors, (32), 6 states have call predecessors, (32), 5 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 00:32:54,534 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:56,600 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:32:59,039 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:01,072 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:04,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:33:04,009 INFO L93 Difference]: Finished difference Result 24495 states and 37858 transitions. [2021-11-17 00:33:04,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-17 00:33:04,010 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.571428571428571) internal successors, (120), 10 states have internal predecessors, (120), 2 states have call successors, (32), 6 states have call predecessors, (32), 5 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 137 [2021-11-17 00:33:04,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:33:04,066 INFO L225 Difference]: With dead ends: 24495 [2021-11-17 00:33:04,066 INFO L226 Difference]: Without dead ends: 13029 [2021-11-17 00:33:04,099 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 314 GetRequests, 290 SyntacticMatches, 1 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=157, Invalid=443, Unknown=0, NotChecked=0, Total=600 [2021-11-17 00:33:04,100 INFO L933 BasicCegarLoop]: 1157 mSDtfsCounter, 931 mSDsluCounter, 4401 mSDsCounter, 0 mSdLazyCounter, 1552 mSolverCounterSat, 958 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 956 SdHoareTripleChecker+Valid, 5558 SdHoareTripleChecker+Invalid, 2514 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 958 IncrementalHoareTripleChecker+Valid, 1552 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.7s IncrementalHoareTripleChecker+Time [2021-11-17 00:33:04,100 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [956 Valid, 5558 Invalid, 2514 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [958 Valid, 1552 Invalid, 4 Unknown, 0 Unchecked, 10.7s Time] [2021-11-17 00:33:04,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13029 states. [2021-11-17 00:33:04,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13029 to 11483. [2021-11-17 00:33:04,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11483 states, 8350 states have (on average 1.337125748502994) internal successors, (11165), 8693 states have internal predecessors, (11165), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2306 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-11-17 00:33:04,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11483 states to 11483 states and 17706 transitions. [2021-11-17 00:33:04,651 INFO L78 Accepts]: Start accepts. Automaton has 11483 states and 17706 transitions. Word has length 137 [2021-11-17 00:33:04,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:33:04,652 INFO L470 AbstractCegarLoop]: Abstraction has 11483 states and 17706 transitions. [2021-11-17 00:33:04,652 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.571428571428571) internal successors, (120), 10 states have internal predecessors, (120), 2 states have call successors, (32), 6 states have call predecessors, (32), 5 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 00:33:04,652 INFO L276 IsEmpty]: Start isEmpty. Operand 11483 states and 17706 transitions. [2021-11-17 00:33:04,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2021-11-17 00:33:04,657 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:33:04,658 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:33:04,681 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-17 00:33:04,874 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-17 00:33:04,874 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:33:04,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:33:04,875 INFO L85 PathProgramCache]: Analyzing trace with hash -858214074, now seen corresponding path program 2 times [2021-11-17 00:33:04,875 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:33:04,875 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37600105] [2021-11-17 00:33:04,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:33:04,875 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:33:04,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:33:05,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:33:05,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:33:05,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:33:05,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-17 00:33:05,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-17 00:33:05,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-17 00:33:05,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-11-17 00:33:05,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2021-11-17 00:33:05,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-11-17 00:33:05,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:33:05,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:33:05,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-17 00:33:05,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:05,530 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-17 00:33:05,530 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:33:05,530 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37600105] [2021-11-17 00:33:05,530 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37600105] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:33:05,530 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:33:05,530 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [16] imperfect sequences [] total 16 [2021-11-17 00:33:05,531 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772929206] [2021-11-17 00:33:05,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:33:05,531 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-11-17 00:33:05,531 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:33:05,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-11-17 00:33:05,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=207, Unknown=0, NotChecked=0, Total=240 [2021-11-17 00:33:05,532 INFO L87 Difference]: Start difference. First operand 11483 states and 17706 transitions. Second operand has 16 states, 16 states have (on average 5.75) internal successors, (92), 10 states have internal predecessors, (92), 4 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-11-17 00:33:07,546 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:10,236 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:12,263 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:14,297 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:18,916 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:20,958 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:22,988 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:25,018 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:36,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:33:36,751 INFO L93 Difference]: Finished difference Result 34306 states and 53578 transitions. [2021-11-17 00:33:36,752 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2021-11-17 00:33:36,752 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 5.75) internal successors, (92), 10 states have internal predecessors, (92), 4 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 140 [2021-11-17 00:33:36,753 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:33:36,829 INFO L225 Difference]: With dead ends: 34306 [2021-11-17 00:33:36,829 INFO L226 Difference]: Without dead ends: 22049 [2021-11-17 00:33:36,864 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 478 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=336, Invalid=1826, Unknown=0, NotChecked=0, Total=2162 [2021-11-17 00:33:36,865 INFO L933 BasicCegarLoop]: 1643 mSDtfsCounter, 4795 mSDsluCounter, 15262 mSDsCounter, 0 mSdLazyCounter, 11993 mSolverCounterSat, 2511 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 27.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5051 SdHoareTripleChecker+Valid, 16905 SdHoareTripleChecker+Invalid, 14512 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2511 IncrementalHoareTripleChecker+Valid, 11993 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 29.4s IncrementalHoareTripleChecker+Time [2021-11-17 00:33:36,865 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5051 Valid, 16905 Invalid, 14512 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2511 Valid, 11993 Invalid, 8 Unknown, 0 Unchecked, 29.4s Time] [2021-11-17 00:33:36,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22049 states. [2021-11-17 00:33:37,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22049 to 16390. [2021-11-17 00:33:37,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16390 states, 11945 states have (on average 1.339891167852658) internal successors, (16005), 12411 states have internal predecessors, (16005), 3218 states have call successors, (3218), 816 states have call predecessors, (3218), 1226 states have return successors, (5735), 3268 states have call predecessors, (5735), 3215 states have call successors, (5735) [2021-11-17 00:33:37,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16390 states to 16390 states and 24958 transitions. [2021-11-17 00:33:37,644 INFO L78 Accepts]: Start accepts. Automaton has 16390 states and 24958 transitions. Word has length 140 [2021-11-17 00:33:37,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:33:37,644 INFO L470 AbstractCegarLoop]: Abstraction has 16390 states and 24958 transitions. [2021-11-17 00:33:37,645 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 5.75) internal successors, (92), 10 states have internal predecessors, (92), 4 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-11-17 00:33:37,645 INFO L276 IsEmpty]: Start isEmpty. Operand 16390 states and 24958 transitions. [2021-11-17 00:33:37,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-11-17 00:33:37,653 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:33:37,653 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:33:37,653 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-11-17 00:33:37,654 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:33:37,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:33:37,654 INFO L85 PathProgramCache]: Analyzing trace with hash -892285559, now seen corresponding path program 1 times [2021-11-17 00:33:37,654 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:33:37,654 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [654177818] [2021-11-17 00:33:37,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:33:37,654 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:33:37,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:33:37,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-17 00:33:37,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-17 00:33:37,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 00:33:37,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-17 00:33:37,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-17 00:33:37,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-17 00:33:37,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-11-17 00:33:37,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2021-11-17 00:33:37,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-11-17 00:33:37,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:33:37,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 00:33:37,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-11-17 00:33:37,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 00:33:37,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 00:33:37,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-17 00:33:37,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:33:37,844 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-11-17 00:33:37,844 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 00:33:37,844 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [654177818] [2021-11-17 00:33:37,844 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [654177818] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 00:33:37,845 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:33:37,845 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 00:33:37,845 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1927794622] [2021-11-17 00:33:37,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 00:33:37,845 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 00:33:37,845 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 00:33:37,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 00:33:37,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:33:37,846 INFO L87 Difference]: Start difference. First operand 16390 states and 24958 transitions. Second operand has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:33:40,229 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:42,260 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:44,298 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:33:49,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:33:49,554 INFO L93 Difference]: Finished difference Result 43289 states and 67310 transitions. [2021-11-17 00:33:49,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-17 00:33:49,555 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 161 [2021-11-17 00:33:49,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:33:49,647 INFO L225 Difference]: With dead ends: 43289 [2021-11-17 00:33:49,647 INFO L226 Difference]: Without dead ends: 26944 [2021-11-17 00:33:49,684 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2021-11-17 00:33:49,685 INFO L933 BasicCegarLoop]: 1750 mSDtfsCounter, 1773 mSDsluCounter, 6452 mSDsCounter, 0 mSdLazyCounter, 2696 mSolverCounterSat, 881 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1900 SdHoareTripleChecker+Valid, 8202 SdHoareTripleChecker+Invalid, 3580 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 881 IncrementalHoareTripleChecker+Valid, 2696 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.6s IncrementalHoareTripleChecker+Time [2021-11-17 00:33:49,686 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1900 Valid, 8202 Invalid, 3580 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [881 Valid, 2696 Invalid, 3 Unknown, 0 Unchecked, 10.6s Time] [2021-11-17 00:33:49,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26944 states. [2021-11-17 00:33:50,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26944 to 16414. [2021-11-17 00:33:50,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16414 states, 11969 states have (on average 1.3392096248642327) internal successors, (16029), 12435 states have internal predecessors, (16029), 3218 states have call successors, (3218), 816 states have call predecessors, (3218), 1226 states have return successors, (5735), 3268 states have call predecessors, (5735), 3215 states have call successors, (5735) [2021-11-17 00:33:50,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16414 states to 16414 states and 24982 transitions. [2021-11-17 00:33:50,452 INFO L78 Accepts]: Start accepts. Automaton has 16414 states and 24982 transitions. Word has length 161 [2021-11-17 00:33:50,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:33:50,452 INFO L470 AbstractCegarLoop]: Abstraction has 16414 states and 24982 transitions. [2021-11-17 00:33:50,452 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:33:50,453 INFO L276 IsEmpty]: Start isEmpty. Operand 16414 states and 24982 transitions. [2021-11-17 00:33:50,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2021-11-17 00:33:50,462 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:33:50,462 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:33:50,462 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-11-17 00:33:50,462 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:33:50,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:33:50,463 INFO L85 PathProgramCache]: Analyzing trace with hash 328420094, now seen corresponding path program 1 times [2021-11-17 00:33:50,463 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 00:33:50,463 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1770476838] [2021-11-17 00:33:50,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:33:50,463 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 00:33:50,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 00:33:50,765 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 00:33:50,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 00:33:51,052 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-17 00:33:51,053 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 00:33:51,053 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 00:33:51,054 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-11-17 00:33:51,057 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:33:51,059 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 00:33:51,095 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 00:33:51,287 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 12:33:51 BoogieIcfgContainer [2021-11-17 00:33:51,287 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 00:33:51,288 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 00:33:51,288 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 00:33:51,288 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 00:33:51,288 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:30:54" (3/4) ... [2021-11-17 00:33:51,290 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 00:33:51,291 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 00:33:51,291 INFO L158 Benchmark]: Toolchain (without parser) took 184970.29ms. Allocated memory was 100.7MB in the beginning and 1.3GB in the end (delta: 1.2GB). Free memory was 59.2MB in the beginning and 356.8MB in the end (delta: -297.6MB). Peak memory consumption was 892.9MB. Max. memory is 16.1GB. [2021-11-17 00:33:51,291 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 100.7MB. Free memory was 57.5MB in the beginning and 57.4MB in the end (delta: 48.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 00:33:51,291 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1359.52ms. Allocated memory was 100.7MB in the beginning and 144.7MB in the end (delta: 44.0MB). Free memory was 59.0MB in the beginning and 57.8MB in the end (delta: 1.2MB). Peak memory consumption was 63.9MB. Max. memory is 16.1GB. [2021-11-17 00:33:51,292 INFO L158 Benchmark]: Boogie Procedure Inliner took 161.63ms. Allocated memory was 144.7MB in the beginning and 234.9MB in the end (delta: 90.2MB). Free memory was 57.8MB in the beginning and 163.0MB in the end (delta: -105.2MB). Peak memory consumption was 17.3MB. Max. memory is 16.1GB. [2021-11-17 00:33:51,292 INFO L158 Benchmark]: Boogie Preprocessor took 153.00ms. Allocated memory is still 234.9MB. Free memory was 163.0MB in the beginning and 144.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-11-17 00:33:51,295 INFO L158 Benchmark]: RCFGBuilder took 6321.05ms. Allocated memory was 234.9MB in the beginning and 348.1MB in the end (delta: 113.2MB). Free memory was 144.1MB in the beginning and 199.5MB in the end (delta: -55.4MB). Peak memory consumption was 68.4MB. Max. memory is 16.1GB. [2021-11-17 00:33:51,295 INFO L158 Benchmark]: TraceAbstraction took 176965.45ms. Allocated memory was 348.1MB in the beginning and 1.3GB in the end (delta: 943.7MB). Free memory was 198.5MB in the beginning and 356.8MB in the end (delta: -158.3MB). Peak memory consumption was 785.4MB. Max. memory is 16.1GB. [2021-11-17 00:33:51,295 INFO L158 Benchmark]: Witness Printer took 2.80ms. Allocated memory is still 1.3GB. Free memory is still 356.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 00:33:51,302 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 100.7MB. Free memory was 57.5MB in the beginning and 57.4MB in the end (delta: 48.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1359.52ms. Allocated memory was 100.7MB in the beginning and 144.7MB in the end (delta: 44.0MB). Free memory was 59.0MB in the beginning and 57.8MB in the end (delta: 1.2MB). Peak memory consumption was 63.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 161.63ms. Allocated memory was 144.7MB in the beginning and 234.9MB in the end (delta: 90.2MB). Free memory was 57.8MB in the beginning and 163.0MB in the end (delta: -105.2MB). Peak memory consumption was 17.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 153.00ms. Allocated memory is still 234.9MB. Free memory was 163.0MB in the beginning and 144.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * RCFGBuilder took 6321.05ms. Allocated memory was 234.9MB in the beginning and 348.1MB in the end (delta: 113.2MB). Free memory was 144.1MB in the beginning and 199.5MB in the end (delta: -55.4MB). Peak memory consumption was 68.4MB. Max. memory is 16.1GB. * TraceAbstraction took 176965.45ms. Allocated memory was 348.1MB in the beginning and 1.3GB in the end (delta: 943.7MB). Free memory was 198.5MB in the beginning and 356.8MB in the end (delta: -158.3MB). Peak memory consumption was 785.4MB. Max. memory is 16.1GB. * Witness Printer took 2.80ms. Allocated memory is still 1.3GB. Free memory is still 356.8MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527, overapproximation of bitwiseAnd at line 8537. Possible FailurePath: [L7077] int LDV_IN_INTERRUPT = 1; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7079] int ldv_state_variable_2 ; [L7080] int ref_cnt ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L7082] int ldv_state_variable_1 ; [L7083] int usb_counter ; [L7084] struct sk_buff *usb_ops_group1 ; [L7085] int ldv_state_variable_0 ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L7170] static struct semaphore add_remove_card_sem ; [L7171] static struct usb_card_rec *usb_card ; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; [L8586] int ldv_retval_0 ; [L8587] int ldv_retval_4 ; [L8588] int ldv_retval_1 ; [L8592] int ldv_retval_3 ; [L8593] int ldv_retval_2 ; [L8989] int INTERF_STATE = 0; [L8990] int SERIAL_STATE = 0; [L8991] void *usb_intfdata = 0; [L8992] struct urb *usb_urb = 0; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8995] int completeFnIntCounter = 0; [L8996] int completeFnBulkCounter = 0; [L8997] void (*completeFnInt)(struct urb * ) ; [L8998] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor.flags=0, descriptor___0={171:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=-2, \result=-2, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=-2, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor.flags=0, descriptor___0={171:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND TRUE tmp != 0L [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, sem={162:0}, sem={162:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={163:0}, ldv_func_arg1={163:0}, ldv_func_arg2={4294967314:4294967299}, ldv_func_arg2={4294967314:4294967299}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor___0={171:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=-3, \result=-3, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=-3, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor___0={171:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND TRUE tmp___0 != 0L [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, tmp___0=-3, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={162:0}, card={4294967304:-208}, card->usb_boot_state=174, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551617:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551617:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551617:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551617:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, p={-18446744073709551617:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551617:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}, value={-18446744073709551617:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result=175, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=175, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=175, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}, value={-18446744073709551617:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0=175, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={167:0}, value={-18446744073709551617:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0=175, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}, value={-18446744073709551617:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0=175, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}, value={-18446744073709551617:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={-18446744073709551617:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={162:0}, card={4294967304:-208}, card->rx_cmd.urb={-18446744073709551617:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={162:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={162:0}, card={4294967304:-208}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={162:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={162:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={162:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, arg={163:0}, arg={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={166:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={165:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551617:0}, usbdriver_name={167:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 857 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 176.7s, OverallIterations: 15, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 164.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 49 mSolverCounterUnknown, 25996 SdHoareTripleChecker+Valid, 155.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 24406 mSDsluCounter, 75933 SdHoareTripleChecker+Invalid, 147.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 57191 mSDsCounter, 14353 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 32019 IncrementalHoareTripleChecker+Invalid, 46421 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 14353 mSolverCounterUnsat, 18742 mSDtfsCounter, 32019 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 847 GetRequests, 673 SyntacticMatches, 1 SemanticMatches, 173 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 634 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=16414occurred in iteration=14, InterpolantAutomatonStates: 148, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 28642 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.6s SatisfiabilityAnalysisTime, 3.6s InterpolantComputationTime, 1839 NumberOfCodeBlocks, 1839 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1803 ConstructedInterpolants, 0 QuantifiedInterpolants, 4133 SizeOfPredicates, 7 NumberOfNonLiveVariables, 3730 ConjunctsInSsa, 22 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 872/876 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 00:33:51,518 WARN L435 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-11-17 00:33:51,536 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 00:33:52,988 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 00:33:52,989 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 00:33:53,025 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 00:33:53,025 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 00:33:53,026 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 00:33:53,027 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 00:33:53,028 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 00:33:53,029 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 00:33:53,032 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 00:33:53,032 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 00:33:53,033 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 00:33:53,034 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 00:33:53,036 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 00:33:53,037 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 00:33:53,039 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 00:33:53,041 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 00:33:53,045 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 00:33:53,046 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 00:33:53,049 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 00:33:53,050 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 00:33:53,054 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 00:33:53,054 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 00:33:53,055 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 00:33:53,057 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 00:33:53,060 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 00:33:53,061 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 00:33:53,061 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 00:33:53,062 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 00:33:53,062 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 00:33:53,062 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 00:33:53,063 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 00:33:53,064 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 00:33:53,066 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 00:33:53,067 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 00:33:53,067 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 00:33:53,068 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 00:33:53,068 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 00:33:53,068 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 00:33:53,069 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 00:33:53,070 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 00:33:53,070 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-17 00:33:53,096 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 00:33:53,097 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 00:33:53,097 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 00:33:53,097 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 00:33:53,098 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 00:33:53,098 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 00:33:53,099 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 00:33:53,099 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 00:33:53,099 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 00:33:53,100 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 00:33:53,100 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 00:33:53,100 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 00:33:53,100 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 00:33:53,101 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 00:33:53,101 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-17 00:33:53,101 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-17 00:33:53,101 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 00:33:53,101 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 00:33:53,101 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 00:33:53,101 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 00:33:53,102 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 00:33:53,102 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 00:33:53,102 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 00:33:53,102 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 00:33:53,102 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 00:33:53,102 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 00:33:53,102 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-17 00:33:53,102 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-17 00:33:53,103 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 00:33:53,103 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 00:33:53,103 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 00:33:53,103 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 00:33:53,103 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-17 00:33:53,103 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2021-11-17 00:33:53,322 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 00:33:53,341 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 00:33:53,343 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 00:33:53,345 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 00:33:53,346 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 00:33:53,348 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:33:53,413 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8787d6ab/2628507e170f46bc8cf4d012e291f00b/FLAG0310184a9 [2021-11-17 00:33:54,000 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 00:33:54,001 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:33:54,037 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8787d6ab/2628507e170f46bc8cf4d012e291f00b/FLAG0310184a9 [2021-11-17 00:33:54,216 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e8787d6ab/2628507e170f46bc8cf4d012e291f00b [2021-11-17 00:33:54,218 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 00:33:54,220 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 00:33:54,222 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 00:33:54,222 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 00:33:54,224 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 00:33:54,226 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 12:33:54" (1/1) ... [2021-11-17 00:33:54,227 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@31f57c21 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:54, skipping insertion in model container [2021-11-17 00:33:54,227 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 12:33:54" (1/1) ... [2021-11-17 00:33:54,232 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 00:33:54,325 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 00:33:55,038 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-17 00:33:55,414 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 00:33:55,466 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 00:33:55,586 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-17 00:33:55,698 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 00:33:55,828 INFO L208 MainTranslator]: Completed translation [2021-11-17 00:33:55,829 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55 WrapperNode [2021-11-17 00:33:55,829 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 00:33:55,830 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 00:33:55,831 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 00:33:55,831 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 00:33:55,836 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:55,901 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,005 INFO L137 Inliner]: procedures = 178, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 2971 [2021-11-17 00:33:56,006 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 00:33:56,007 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 00:33:56,007 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 00:33:56,007 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 00:33:56,013 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,014 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,043 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,044 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,109 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,127 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,142 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,164 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 00:33:56,165 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 00:33:56,165 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 00:33:56,165 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 00:33:56,166 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (1/1) ... [2021-11-17 00:33:56,170 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 00:33:56,177 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 00:33:56,187 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 00:33:56,194 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 00:33:56,220 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-17 00:33:56,220 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-17 00:33:56,220 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2021-11-17 00:33:56,221 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2021-11-17 00:33:56,221 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2021-11-17 00:33:56,221 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2021-11-17 00:33:56,221 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-17 00:33:56,221 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2021-11-17 00:33:56,221 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2021-11-17 00:33:56,221 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2021-11-17 00:33:56,221 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2021-11-17 00:33:56,221 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-17 00:33:56,222 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-17 00:33:56,222 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 00:33:56,222 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-17 00:33:56,222 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 00:33:56,222 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-17 00:33:56,222 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-17 00:33:56,222 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 00:33:56,222 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 00:33:56,222 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 00:33:56,223 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 00:33:56,223 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-17 00:33:56,223 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-17 00:33:56,223 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-17 00:33:56,223 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-17 00:33:56,223 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 00:33:56,223 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 00:33:56,223 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-17 00:33:56,223 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-17 00:33:56,224 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 00:33:56,224 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 00:33:56,224 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 00:33:56,224 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 00:33:56,224 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-17 00:33:56,224 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-17 00:33:56,225 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 00:33:56,225 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 00:33:56,225 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-17 00:33:56,225 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-17 00:33:56,225 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-17 00:33:56,225 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-17 00:33:56,225 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 00:33:56,226 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 00:33:56,226 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 00:33:56,226 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 00:33:56,226 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2021-11-17 00:33:56,226 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2021-11-17 00:33:56,226 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-17 00:33:56,226 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-17 00:33:56,226 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-17 00:33:56,226 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-17 00:33:56,227 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-17 00:33:56,227 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-17 00:33:56,227 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2021-11-17 00:33:56,228 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2021-11-17 00:33:56,228 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 00:33:56,228 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 00:33:56,229 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-17 00:33:56,229 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-17 00:33:56,229 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 00:33:56,229 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 00:33:56,229 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 00:33:56,230 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 00:33:56,230 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 00:33:56,230 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-11-17 00:33:56,230 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-11-17 00:33:56,230 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-17 00:33:56,230 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-17 00:33:56,230 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 00:33:56,230 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-17 00:33:56,230 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-17 00:33:56,231 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-17 00:33:56,231 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-17 00:33:56,231 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 00:33:56,231 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 00:33:56,231 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-17 00:33:56,232 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-17 00:33:56,232 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 00:33:56,232 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 00:33:56,232 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-17 00:33:56,232 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-17 00:33:56,232 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-17 00:33:56,232 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2021-11-17 00:33:56,232 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2021-11-17 00:33:56,232 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 00:33:56,232 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-17 00:33:56,233 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-17 00:33:56,233 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-17 00:33:56,233 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-17 00:33:56,233 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-17 00:33:56,233 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-17 00:33:56,234 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-17 00:33:56,234 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 00:33:56,234 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-17 00:33:56,234 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 00:33:56,235 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-17 00:33:56,235 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-17 00:33:56,235 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-17 00:33:56,235 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-17 00:33:56,235 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2021-11-17 00:33:56,236 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2021-11-17 00:33:56,236 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-17 00:33:56,236 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-17 00:33:56,236 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-17 00:33:56,236 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-17 00:33:56,236 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-17 00:33:56,236 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-17 00:33:56,236 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-17 00:33:56,236 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-17 00:33:56,237 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-17 00:33:56,237 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-17 00:33:56,237 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-17 00:33:56,237 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-17 00:33:56,237 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-17 00:33:56,238 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-17 00:33:56,238 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 00:33:56,240 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 00:33:56,240 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-17 00:33:56,240 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-17 00:33:56,666 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 00:33:56,668 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 00:33:57,222 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 00:33:59,392 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-11-17 00:34:08,557 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 00:34:08,577 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 00:34:08,577 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-11-17 00:34:08,579 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:34:08 BoogieIcfgContainer [2021-11-17 00:34:08,579 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 00:34:08,580 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 00:34:08,581 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 00:34:08,582 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 00:34:08,583 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 12:33:54" (1/3) ... [2021-11-17 00:34:08,583 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f191de5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 12:34:08, skipping insertion in model container [2021-11-17 00:34:08,583 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 12:33:55" (2/3) ... [2021-11-17 00:34:08,583 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f191de5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 12:34:08, skipping insertion in model container [2021-11-17 00:34:08,584 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:34:08" (3/3) ... [2021-11-17 00:34:08,584 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-17 00:34:08,588 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 00:34:08,588 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 00:34:08,627 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 00:34:08,633 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 00:34:08,633 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 00:34:08,660 INFO L276 IsEmpty]: Start isEmpty. Operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2021-11-17 00:34:08,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-17 00:34:08,667 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:08,667 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:08,668 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:08,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:08,671 INFO L85 PathProgramCache]: Analyzing trace with hash -967497407, now seen corresponding path program 1 times [2021-11-17 00:34:08,685 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:08,685 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1577757519] [2021-11-17 00:34:08,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:08,686 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:08,686 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:08,688 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:08,690 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-17 00:34:09,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:09,166 INFO L263 TraceCheckSpWp]: Trace formula consists of 684 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-17 00:34:09,170 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:09,458 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 00:34:09,458 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:09,875 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 00:34:09,876 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:09,876 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1577757519] [2021-11-17 00:34:09,876 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1577757519] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:09,877 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:09,877 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2021-11-17 00:34:09,878 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431200968] [2021-11-17 00:34:09,878 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:09,881 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 00:34:09,881 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:09,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 00:34:09,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-11-17 00:34:09,899 INFO L87 Difference]: Start difference. First operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 6 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 00:34:10,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:10,239 INFO L93 Difference]: Finished difference Result 1714 states and 2513 transitions. [2021-11-17 00:34:10,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 00:34:10,243 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 6 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 44 [2021-11-17 00:34:10,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:10,263 INFO L225 Difference]: With dead ends: 1714 [2021-11-17 00:34:10,263 INFO L226 Difference]: Without dead ends: 848 [2021-11-17 00:34:10,272 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=25, Invalid=31, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:34:10,276 INFO L933 BasicCegarLoop]: 1217 mSDtfsCounter, 8 mSDsluCounter, 2431 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 3648 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:10,277 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 3648 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 00:34:10,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 848 states. [2021-11-17 00:34:10,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 848 to 848. [2021-11-17 00:34:10,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 848 states, 631 states have (on average 1.3724247226624406) internal successors, (866), 649 states have internal predecessors, (866), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2021-11-17 00:34:10,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 848 states to 848 states and 1209 transitions. [2021-11-17 00:34:10,369 INFO L78 Accepts]: Start accepts. Automaton has 848 states and 1209 transitions. Word has length 44 [2021-11-17 00:34:10,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:10,370 INFO L470 AbstractCegarLoop]: Abstraction has 848 states and 1209 transitions. [2021-11-17 00:34:10,371 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 6 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 00:34:10,371 INFO L276 IsEmpty]: Start isEmpty. Operand 848 states and 1209 transitions. [2021-11-17 00:34:10,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-11-17 00:34:10,374 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:10,374 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:10,389 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:10,578 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:10,579 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:10,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:10,579 INFO L85 PathProgramCache]: Analyzing trace with hash 543306113, now seen corresponding path program 1 times [2021-11-17 00:34:10,580 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:10,581 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [518843572] [2021-11-17 00:34:10,581 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:10,581 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:10,581 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:10,582 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:10,584 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-17 00:34:10,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:10,987 INFO L263 TraceCheckSpWp]: Trace formula consists of 694 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-17 00:34:10,989 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:11,348 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 00:34:11,348 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:12,063 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 00:34:12,063 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:12,063 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [518843572] [2021-11-17 00:34:12,063 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [518843572] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 00:34:12,063 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 00:34:12,063 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 10 [2021-11-17 00:34:12,063 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1153750453] [2021-11-17 00:34:12,064 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 00:34:12,065 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-17 00:34:12,065 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:12,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-17 00:34:12,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-17 00:34:12,066 INFO L87 Difference]: Start difference. First operand 848 states and 1209 transitions. Second operand has 10 states, 10 states have (on average 3.6) internal successors, (36), 10 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 00:34:12,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:12,830 INFO L93 Difference]: Finished difference Result 1692 states and 2413 transitions. [2021-11-17 00:34:12,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 00:34:12,832 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 3.6) internal successors, (36), 10 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 46 [2021-11-17 00:34:12,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:12,838 INFO L225 Difference]: With dead ends: 1692 [2021-11-17 00:34:12,838 INFO L226 Difference]: Without dead ends: 852 [2021-11-17 00:34:12,841 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=71, Invalid=139, Unknown=0, NotChecked=0, Total=210 [2021-11-17 00:34:12,842 INFO L933 BasicCegarLoop]: 1200 mSDtfsCounter, 15 mSDsluCounter, 3595 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 4795 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:12,845 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 4795 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-17 00:34:12,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 852 states. [2021-11-17 00:34:12,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 852 to 852. [2021-11-17 00:34:12,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 852 states, 635 states have (on average 1.368503937007874) internal successors, (869), 653 states have internal predecessors, (869), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2021-11-17 00:34:12,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 852 states to 852 states and 1212 transitions. [2021-11-17 00:34:12,882 INFO L78 Accepts]: Start accepts. Automaton has 852 states and 1212 transitions. Word has length 46 [2021-11-17 00:34:12,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:12,884 INFO L470 AbstractCegarLoop]: Abstraction has 852 states and 1212 transitions. [2021-11-17 00:34:12,887 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 3.6) internal successors, (36), 10 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-17 00:34:12,888 INFO L276 IsEmpty]: Start isEmpty. Operand 852 states and 1212 transitions. [2021-11-17 00:34:12,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-11-17 00:34:12,895 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:12,895 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:12,913 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-11-17 00:34:13,110 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:13,111 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:13,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:13,111 INFO L85 PathProgramCache]: Analyzing trace with hash 726542785, now seen corresponding path program 2 times [2021-11-17 00:34:13,112 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:13,112 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1082657767] [2021-11-17 00:34:13,112 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 00:34:13,112 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:13,112 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:13,113 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:13,126 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-17 00:34:13,491 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 00:34:13,491 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 00:34:13,506 INFO L263 TraceCheckSpWp]: Trace formula consists of 646 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 00:34:13,508 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:13,704 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 00:34:13,704 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:13,914 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 00:34:13,915 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:13,915 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1082657767] [2021-11-17 00:34:13,915 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1082657767] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:13,915 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:13,915 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 00:34:13,916 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1436170096] [2021-11-17 00:34:13,916 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:13,917 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 00:34:13,918 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:13,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 00:34:13,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 00:34:13,918 INFO L87 Difference]: Start difference. First operand 852 states and 1212 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 00:34:15,971 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:34:19,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:19,141 INFO L93 Difference]: Finished difference Result 3232 states and 4619 transitions. [2021-11-17 00:34:19,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 00:34:19,143 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2021-11-17 00:34:19,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:19,158 INFO L225 Difference]: With dead ends: 3232 [2021-11-17 00:34:19,159 INFO L226 Difference]: Without dead ends: 2399 [2021-11-17 00:34:19,161 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 00:34:19,162 INFO L933 BasicCegarLoop]: 1631 mSDtfsCounter, 2998 mSDsluCounter, 1936 mSDsCounter, 0 mSdLazyCounter, 346 mSolverCounterSat, 324 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2998 SdHoareTripleChecker+Valid, 3567 SdHoareTripleChecker+Invalid, 671 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 324 IncrementalHoareTripleChecker+Valid, 346 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:19,162 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2998 Valid, 3567 Invalid, 671 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [324 Valid, 346 Invalid, 1 Unknown, 0 Unchecked, 5.1s Time] [2021-11-17 00:34:19,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2399 states. [2021-11-17 00:34:19,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2399 to 2399. [2021-11-17 00:34:19,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2399 states, 1784 states have (on average 1.373878923766816) internal successors, (2451), 1830 states have internal predecessors, (2451), 490 states have call successors, (490), 125 states have call predecessors, (490), 124 states have return successors, (485), 461 states have call predecessors, (485), 485 states have call successors, (485) [2021-11-17 00:34:19,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2399 states to 2399 states and 3426 transitions. [2021-11-17 00:34:19,222 INFO L78 Accepts]: Start accepts. Automaton has 2399 states and 3426 transitions. Word has length 48 [2021-11-17 00:34:19,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:19,223 INFO L470 AbstractCegarLoop]: Abstraction has 2399 states and 3426 transitions. [2021-11-17 00:34:19,223 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-17 00:34:19,223 INFO L276 IsEmpty]: Start isEmpty. Operand 2399 states and 3426 transitions. [2021-11-17 00:34:19,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-17 00:34:19,224 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:19,224 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:19,251 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:19,437 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:19,437 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:19,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:19,438 INFO L85 PathProgramCache]: Analyzing trace with hash 11952355, now seen corresponding path program 1 times [2021-11-17 00:34:19,439 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:19,439 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [229381654] [2021-11-17 00:34:19,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:19,439 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:19,439 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:19,440 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:19,440 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-17 00:34:19,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:19,932 INFO L263 TraceCheckSpWp]: Trace formula consists of 849 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-17 00:34:19,936 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:20,321 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 00:34:20,321 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:21,045 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:21,045 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:21,045 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [229381654] [2021-11-17 00:34:21,046 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [229381654] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:21,046 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:21,046 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-17 00:34:21,046 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887090469] [2021-11-17 00:34:21,046 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:21,046 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 00:34:21,046 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:21,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 00:34:21,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:34:21,047 INFO L87 Difference]: Start difference. First operand 2399 states and 3426 transitions. Second operand has 8 states, 6 states have (on average 7.666666666666667) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-17 00:34:23,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:23,031 INFO L93 Difference]: Finished difference Result 5119 states and 7371 transitions. [2021-11-17 00:34:23,032 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 00:34:23,033 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 7.666666666666667) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 65 [2021-11-17 00:34:23,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:23,044 INFO L225 Difference]: With dead ends: 5119 [2021-11-17 00:34:23,044 INFO L226 Difference]: Without dead ends: 2746 [2021-11-17 00:34:23,048 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 121 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-17 00:34:23,050 INFO L933 BasicCegarLoop]: 1679 mSDtfsCounter, 451 mSDsluCounter, 9503 mSDsCounter, 0 mSdLazyCounter, 224 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 11182 SdHoareTripleChecker+Invalid, 290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 224 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 66 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:23,051 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [538 Valid, 11182 Invalid, 290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 224 Invalid, 0 Unknown, 66 Unchecked, 1.8s Time] [2021-11-17 00:34:23,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2746 states. [2021-11-17 00:34:23,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2746 to 2399. [2021-11-17 00:34:23,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2399 states, 1784 states have (on average 1.3733183856502242) internal successors, (2450), 1830 states have internal predecessors, (2450), 490 states have call successors, (490), 125 states have call predecessors, (490), 124 states have return successors, (485), 461 states have call predecessors, (485), 485 states have call successors, (485) [2021-11-17 00:34:23,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2399 states to 2399 states and 3425 transitions. [2021-11-17 00:34:23,135 INFO L78 Accepts]: Start accepts. Automaton has 2399 states and 3425 transitions. Word has length 65 [2021-11-17 00:34:23,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:23,136 INFO L470 AbstractCegarLoop]: Abstraction has 2399 states and 3425 transitions. [2021-11-17 00:34:23,136 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 7.666666666666667) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-17 00:34:23,136 INFO L276 IsEmpty]: Start isEmpty. Operand 2399 states and 3425 transitions. [2021-11-17 00:34:23,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-17 00:34:23,138 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:23,139 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:23,159 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:23,359 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:23,359 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:23,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:23,360 INFO L85 PathProgramCache]: Analyzing trace with hash 230807073, now seen corresponding path program 1 times [2021-11-17 00:34:23,361 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:23,361 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [670859523] [2021-11-17 00:34:23,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:23,361 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:23,361 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:23,362 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:23,363 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-17 00:34:23,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:23,889 INFO L263 TraceCheckSpWp]: Trace formula consists of 849 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-17 00:34:23,891 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:25,402 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:25,402 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:25,940 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:25,940 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:25,940 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [670859523] [2021-11-17 00:34:25,940 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [670859523] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:25,940 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:25,940 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 4 [2021-11-17 00:34:25,941 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1874520981] [2021-11-17 00:34:25,941 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:25,941 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 00:34:25,941 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:25,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 00:34:25,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 00:34:25,942 INFO L87 Difference]: Start difference. First operand 2399 states and 3425 transitions. Second operand has 4 states, 4 states have (on average 19.75) internal successors, (79), 4 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:34:26,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:26,817 INFO L93 Difference]: Finished difference Result 7146 states and 10414 transitions. [2021-11-17 00:34:26,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 00:34:26,818 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 19.75) internal successors, (79), 4 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 65 [2021-11-17 00:34:26,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:26,840 INFO L225 Difference]: With dead ends: 7146 [2021-11-17 00:34:26,841 INFO L226 Difference]: Without dead ends: 4773 [2021-11-17 00:34:26,848 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 126 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 00:34:26,849 INFO L933 BasicCegarLoop]: 1433 mSDtfsCounter, 2006 mSDsluCounter, 1176 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 363 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2006 SdHoareTripleChecker+Valid, 2609 SdHoareTripleChecker+Invalid, 383 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 363 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:26,849 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2006 Valid, 2609 Invalid, 383 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [363 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-17 00:34:26,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4773 states. [2021-11-17 00:34:26,966 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4773 to 4761. [2021-11-17 00:34:26,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4761 states, 3544 states have (on average 1.3733069977426637) internal successors, (4867), 3632 states have internal predecessors, (4867), 970 states have call successors, (970), 247 states have call predecessors, (970), 246 states have return successors, (1044), 917 states have call predecessors, (1044), 965 states have call successors, (1044) [2021-11-17 00:34:26,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4761 states to 4761 states and 6881 transitions. [2021-11-17 00:34:26,987 INFO L78 Accepts]: Start accepts. Automaton has 4761 states and 6881 transitions. Word has length 65 [2021-11-17 00:34:26,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:26,988 INFO L470 AbstractCegarLoop]: Abstraction has 4761 states and 6881 transitions. [2021-11-17 00:34:26,988 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 19.75) internal successors, (79), 4 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:34:26,988 INFO L276 IsEmpty]: Start isEmpty. Operand 4761 states and 6881 transitions. [2021-11-17 00:34:26,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-11-17 00:34:26,990 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:26,990 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:27,011 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:27,209 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:27,209 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:27,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:27,210 INFO L85 PathProgramCache]: Analyzing trace with hash -1435282055, now seen corresponding path program 1 times [2021-11-17 00:34:27,211 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:27,211 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [591926134] [2021-11-17 00:34:27,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:27,211 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:27,211 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:27,212 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:27,214 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-17 00:34:27,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:27,752 INFO L263 TraceCheckSpWp]: Trace formula consists of 850 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-17 00:34:27,755 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:29,182 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:29,182 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:29,718 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:29,718 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:29,718 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [591926134] [2021-11-17 00:34:29,718 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [591926134] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:29,718 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:29,718 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 4 [2021-11-17 00:34:29,718 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [875545758] [2021-11-17 00:34:29,718 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:29,719 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 00:34:29,719 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:29,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 00:34:29,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 00:34:29,719 INFO L87 Difference]: Start difference. First operand 4761 states and 6881 transitions. Second operand has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:34:33,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:33,886 INFO L93 Difference]: Finished difference Result 18916 states and 27976 transitions. [2021-11-17 00:34:33,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 00:34:33,887 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 66 [2021-11-17 00:34:33,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:33,993 INFO L225 Difference]: With dead ends: 18916 [2021-11-17 00:34:33,993 INFO L226 Difference]: Without dead ends: 14181 [2021-11-17 00:34:34,025 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 128 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 00:34:34,026 INFO L933 BasicCegarLoop]: 1547 mSDtfsCounter, 3127 mSDsluCounter, 2000 mSDsCounter, 0 mSdLazyCounter, 352 mSolverCounterSat, 363 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3127 SdHoareTripleChecker+Valid, 3547 SdHoareTripleChecker+Invalid, 715 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 363 IncrementalHoareTripleChecker+Valid, 352 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:34,027 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3127 Valid, 3547 Invalid, 715 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [363 Valid, 352 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2021-11-17 00:34:34,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14181 states. [2021-11-17 00:34:34,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14181 to 14152. [2021-11-17 00:34:34,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14152 states, 10533 states have (on average 1.3706446406531851) internal successors, (14437), 10791 states have internal predecessors, (14437), 2884 states have call successors, (2884), 735 states have call predecessors, (2884), 734 states have return successors, (3281), 2733 states have call predecessors, (3281), 2879 states have call successors, (3281) [2021-11-17 00:34:34,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14152 states to 14152 states and 20602 transitions. [2021-11-17 00:34:34,614 INFO L78 Accepts]: Start accepts. Automaton has 14152 states and 20602 transitions. Word has length 66 [2021-11-17 00:34:34,614 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:34,614 INFO L470 AbstractCegarLoop]: Abstraction has 14152 states and 20602 transitions. [2021-11-17 00:34:34,614 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 00:34:34,615 INFO L276 IsEmpty]: Start isEmpty. Operand 14152 states and 20602 transitions. [2021-11-17 00:34:34,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-17 00:34:34,616 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:34,617 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:34,633 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:34,817 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:34,819 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:34,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:34,820 INFO L85 PathProgramCache]: Analyzing trace with hash -1544432604, now seen corresponding path program 1 times [2021-11-17 00:34:34,820 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:34,821 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1714145392] [2021-11-17 00:34:34,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:34,821 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:34,821 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:34,822 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:34,823 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-17 00:34:35,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:35,332 INFO L263 TraceCheckSpWp]: Trace formula consists of 851 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 00:34:35,334 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:36,021 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:36,021 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:36,544 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:36,544 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:36,544 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1714145392] [2021-11-17 00:34:36,544 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1714145392] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:36,544 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:36,544 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 00:34:36,545 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [909696475] [2021-11-17 00:34:36,545 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:36,545 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 00:34:36,545 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:36,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 00:34:36,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:36,545 INFO L87 Difference]: Start difference. First operand 14152 states and 20602 transitions. Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-17 00:34:36,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:36,850 INFO L93 Difference]: Finished difference Result 14176 states and 20626 transitions. [2021-11-17 00:34:36,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 00:34:36,850 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) Word has length 67 [2021-11-17 00:34:36,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:36,968 INFO L225 Difference]: With dead ends: 14176 [2021-11-17 00:34:36,968 INFO L226 Difference]: Without dead ends: 14173 [2021-11-17 00:34:36,973 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:36,973 INFO L933 BasicCegarLoop]: 1385 mSDtfsCounter, 1156 mSDsluCounter, 1173 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1156 SdHoareTripleChecker+Valid, 2558 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:36,974 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1156 Valid, 2558 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 00:34:36,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14173 states. [2021-11-17 00:34:37,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14173 to 14170. [2021-11-17 00:34:37,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14170 states, 10551 states have (on average 1.3701070988531894) internal successors, (14456), 10807 states have internal predecessors, (14456), 2884 states have call successors, (2884), 735 states have call predecessors, (2884), 734 states have return successors, (3281), 2735 states have call predecessors, (3281), 2879 states have call successors, (3281) [2021-11-17 00:34:37,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14170 states to 14170 states and 20621 transitions. [2021-11-17 00:34:37,474 INFO L78 Accepts]: Start accepts. Automaton has 14170 states and 20621 transitions. Word has length 67 [2021-11-17 00:34:37,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:37,475 INFO L470 AbstractCegarLoop]: Abstraction has 14170 states and 20621 transitions. [2021-11-17 00:34:37,475 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-17 00:34:37,475 INFO L276 IsEmpty]: Start isEmpty. Operand 14170 states and 20621 transitions. [2021-11-17 00:34:37,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-11-17 00:34:37,477 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:37,478 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:37,495 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:37,687 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:37,688 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:37,688 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:37,688 INFO L85 PathProgramCache]: Analyzing trace with hash -633127460, now seen corresponding path program 1 times [2021-11-17 00:34:37,689 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:37,689 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1554621033] [2021-11-17 00:34:37,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:37,689 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:37,689 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:37,690 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:37,691 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-17 00:34:38,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:38,212 INFO L263 TraceCheckSpWp]: Trace formula consists of 852 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 00:34:38,214 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:38,923 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:38,924 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:39,369 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:39,370 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:39,370 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1554621033] [2021-11-17 00:34:39,370 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1554621033] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:39,370 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:39,370 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 00:34:39,370 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2038044058] [2021-11-17 00:34:39,370 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:39,370 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 00:34:39,371 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:39,371 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 00:34:39,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:39,371 INFO L87 Difference]: Start difference. First operand 14170 states and 20621 transitions. Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-17 00:34:39,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:39,638 INFO L93 Difference]: Finished difference Result 14172 states and 20622 transitions. [2021-11-17 00:34:39,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 00:34:39,638 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) Word has length 68 [2021-11-17 00:34:39,639 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:39,680 INFO L225 Difference]: With dead ends: 14172 [2021-11-17 00:34:39,681 INFO L226 Difference]: Without dead ends: 14169 [2021-11-17 00:34:39,686 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 133 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:39,686 INFO L933 BasicCegarLoop]: 1197 mSDtfsCounter, 1145 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1145 SdHoareTripleChecker+Valid, 1197 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:39,687 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1145 Valid, 1197 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 00:34:39,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14169 states. [2021-11-17 00:34:40,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14169 to 14169. [2021-11-17 00:34:40,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14169 states, 10551 states have (on average 1.370012321107004) internal successors, (14455), 10806 states have internal predecessors, (14455), 2883 states have call successors, (2883), 735 states have call predecessors, (2883), 734 states have return successors, (3281), 2735 states have call predecessors, (3281), 2879 states have call successors, (3281) [2021-11-17 00:34:40,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14169 states to 14169 states and 20619 transitions. [2021-11-17 00:34:40,149 INFO L78 Accepts]: Start accepts. Automaton has 14169 states and 20619 transitions. Word has length 68 [2021-11-17 00:34:40,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:40,150 INFO L470 AbstractCegarLoop]: Abstraction has 14169 states and 20619 transitions. [2021-11-17 00:34:40,150 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-17 00:34:40,150 INFO L276 IsEmpty]: Start isEmpty. Operand 14169 states and 20619 transitions. [2021-11-17 00:34:40,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-11-17 00:34:40,151 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:40,151 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:40,170 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:40,367 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:40,367 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:40,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:40,368 INFO L85 PathProgramCache]: Analyzing trace with hash 1847533095, now seen corresponding path program 1 times [2021-11-17 00:34:40,369 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:40,369 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [822024340] [2021-11-17 00:34:40,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:40,369 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:40,369 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:40,371 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:40,372 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-17 00:34:40,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:40,951 INFO L263 TraceCheckSpWp]: Trace formula consists of 853 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 00:34:40,953 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:41,802 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:41,803 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:42,272 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:42,273 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:42,273 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [822024340] [2021-11-17 00:34:42,273 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [822024340] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:42,273 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:42,273 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 00:34:42,273 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [9483450] [2021-11-17 00:34:42,273 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:42,274 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 00:34:42,274 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:42,274 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 00:34:42,274 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:42,275 INFO L87 Difference]: Start difference. First operand 14169 states and 20619 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-17 00:34:42,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:42,488 INFO L93 Difference]: Finished difference Result 14171 states and 20620 transitions. [2021-11-17 00:34:42,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 00:34:42,488 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) Word has length 69 [2021-11-17 00:34:42,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:42,582 INFO L225 Difference]: With dead ends: 14171 [2021-11-17 00:34:42,582 INFO L226 Difference]: Without dead ends: 14139 [2021-11-17 00:34:42,587 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 135 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:42,588 INFO L933 BasicCegarLoop]: 1196 mSDtfsCounter, 1142 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1142 SdHoareTripleChecker+Valid, 1196 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:42,588 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1142 Valid, 1196 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 00:34:42,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14139 states. [2021-11-17 00:34:42,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14139 to 14139. [2021-11-17 00:34:42,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14139 states, 10524 states have (on average 1.3699163816039528) internal successors, (14417), 10778 states have internal predecessors, (14417), 2880 states have call successors, (2880), 735 states have call predecessors, (2880), 734 states have return successors, (3276), 2733 states have call predecessors, (3276), 2877 states have call successors, (3276) [2021-11-17 00:34:43,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14139 states to 14139 states and 20573 transitions. [2021-11-17 00:34:43,021 INFO L78 Accepts]: Start accepts. Automaton has 14139 states and 20573 transitions. Word has length 69 [2021-11-17 00:34:43,022 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:43,022 INFO L470 AbstractCegarLoop]: Abstraction has 14139 states and 20573 transitions. [2021-11-17 00:34:43,022 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-17 00:34:43,022 INFO L276 IsEmpty]: Start isEmpty. Operand 14139 states and 20573 transitions. [2021-11-17 00:34:43,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2021-11-17 00:34:43,033 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:43,033 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:43,052 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:43,247 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:43,247 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:43,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:43,248 INFO L85 PathProgramCache]: Analyzing trace with hash 1553347695, now seen corresponding path program 1 times [2021-11-17 00:34:43,249 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:43,249 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [947664500] [2021-11-17 00:34:43,249 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:43,249 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:43,249 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:43,250 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:43,252 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-17 00:34:43,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:43,791 INFO L263 TraceCheckSpWp]: Trace formula consists of 952 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 00:34:43,793 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:44,244 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-17 00:34:44,244 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:44,594 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-17 00:34:44,595 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:44,595 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [947664500] [2021-11-17 00:34:44,595 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [947664500] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:44,595 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:44,595 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-17 00:34:44,595 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37273771] [2021-11-17 00:34:44,595 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:44,595 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 00:34:44,596 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:44,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 00:34:44,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:44,596 INFO L87 Difference]: Start difference. First operand 14139 states and 20573 transitions. Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:34:45,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:45,514 INFO L93 Difference]: Finished difference Result 38561 states and 55724 transitions. [2021-11-17 00:34:45,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 00:34:45,515 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 102 [2021-11-17 00:34:45,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:45,609 INFO L225 Difference]: With dead ends: 38561 [2021-11-17 00:34:45,609 INFO L226 Difference]: Without dead ends: 24448 [2021-11-17 00:34:45,661 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 201 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:34:45,662 INFO L933 BasicCegarLoop]: 1603 mSDtfsCounter, 872 mSDsluCounter, 1149 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 872 SdHoareTripleChecker+Valid, 2752 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:45,662 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [872 Valid, 2752 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-17 00:34:45,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24448 states. [2021-11-17 00:34:46,374 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24448 to 24400. [2021-11-17 00:34:46,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24400 states, 18069 states have (on average 1.3602855719740994) internal successors, (24579), 18544 states have internal predecessors, (24579), 4942 states have call successors, (4942), 1389 states have call predecessors, (4942), 1388 states have return successors, (5593), 4664 states have call predecessors, (5593), 4939 states have call successors, (5593) [2021-11-17 00:34:46,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24400 states to 24400 states and 35114 transitions. [2021-11-17 00:34:46,628 INFO L78 Accepts]: Start accepts. Automaton has 24400 states and 35114 transitions. Word has length 102 [2021-11-17 00:34:46,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:46,628 INFO L470 AbstractCegarLoop]: Abstraction has 24400 states and 35114 transitions. [2021-11-17 00:34:46,628 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-17 00:34:46,628 INFO L276 IsEmpty]: Start isEmpty. Operand 24400 states and 35114 transitions. [2021-11-17 00:34:46,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2021-11-17 00:34:46,636 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:46,637 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:46,656 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:46,847 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:46,847 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:46,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:46,848 INFO L85 PathProgramCache]: Analyzing trace with hash -1390336057, now seen corresponding path program 1 times [2021-11-17 00:34:46,849 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:46,849 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [238494703] [2021-11-17 00:34:46,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:46,849 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:46,849 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:46,850 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:46,852 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-17 00:34:47,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:47,453 INFO L263 TraceCheckSpWp]: Trace formula consists of 1021 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 00:34:47,455 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:48,065 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-17 00:34:48,065 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:48,470 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-11-17 00:34:48,470 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:48,470 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [238494703] [2021-11-17 00:34:48,470 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [238494703] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:48,470 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:48,470 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-17 00:34:48,471 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495304331] [2021-11-17 00:34:48,471 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:48,471 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 00:34:48,472 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:48,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 00:34:48,472 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 00:34:48,472 INFO L87 Difference]: Start difference. First operand 24400 states and 35114 transitions. Second operand has 5 states, 5 states have (on average 20.2) internal successors, (101), 5 states have internal predecessors, (101), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-17 00:34:50,520 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:34:51,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:51,425 INFO L93 Difference]: Finished difference Result 42667 states and 61279 transitions. [2021-11-17 00:34:51,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 00:34:51,426 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 5 states have internal predecessors, (101), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 128 [2021-11-17 00:34:51,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:51,492 INFO L225 Difference]: With dead ends: 42667 [2021-11-17 00:34:51,492 INFO L226 Difference]: Without dead ends: 18283 [2021-11-17 00:34:51,551 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 251 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-17 00:34:51,551 INFO L933 BasicCegarLoop]: 1194 mSDtfsCounter, 38 mSDsluCounter, 3573 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 6 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4767 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:51,552 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 4767 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 17 Invalid, 1 Unknown, 0 Unchecked, 2.5s Time] [2021-11-17 00:34:51,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18283 states. [2021-11-17 00:34:52,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18283 to 18108. [2021-11-17 00:34:52,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18108 states, 13406 states have (on average 1.3575264806802925) internal successors, (18199), 13764 states have internal predecessors, (18199), 3652 states have call successors, (3652), 1050 states have call predecessors, (3652), 1049 states have return successors, (4099), 3440 states have call predecessors, (4099), 3649 states have call successors, (4099) [2021-11-17 00:34:52,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18108 states to 18108 states and 25950 transitions. [2021-11-17 00:34:52,211 INFO L78 Accepts]: Start accepts. Automaton has 18108 states and 25950 transitions. Word has length 128 [2021-11-17 00:34:52,212 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:52,212 INFO L470 AbstractCegarLoop]: Abstraction has 18108 states and 25950 transitions. [2021-11-17 00:34:52,212 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 5 states have internal predecessors, (101), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-17 00:34:52,212 INFO L276 IsEmpty]: Start isEmpty. Operand 18108 states and 25950 transitions. [2021-11-17 00:34:52,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-11-17 00:34:52,220 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:52,220 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:52,239 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:52,435 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:52,436 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:52,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:52,436 INFO L85 PathProgramCache]: Analyzing trace with hash -1851619390, now seen corresponding path program 1 times [2021-11-17 00:34:52,437 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:52,437 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [725797027] [2021-11-17 00:34:52,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:52,437 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:52,437 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:52,438 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:52,439 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-17 00:34:53,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:53,060 INFO L263 TraceCheckSpWp]: Trace formula consists of 1042 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-17 00:34:53,064 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:53,704 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2021-11-17 00:34:53,704 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:54,542 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2021-11-17 00:34:54,543 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:54,543 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [725797027] [2021-11-17 00:34:54,543 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [725797027] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:54,543 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:54,543 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-17 00:34:54,543 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1179683954] [2021-11-17 00:34:54,543 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:54,543 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 00:34:54,543 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:54,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 00:34:54,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:34:54,544 INFO L87 Difference]: Start difference. First operand 18108 states and 25950 transitions. Second operand has 8 states, 6 states have (on average 18.0) internal successors, (108), 7 states have internal predecessors, (108), 4 states have call successors, (19), 2 states have call predecessors, (19), 4 states have return successors, (18), 3 states have call predecessors, (18), 4 states have call successors, (18) [2021-11-17 00:34:56,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:34:56,659 INFO L93 Difference]: Finished difference Result 34562 states and 49576 transitions. [2021-11-17 00:34:56,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 00:34:56,660 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 18.0) internal successors, (108), 7 states have internal predecessors, (108), 4 states have call successors, (19), 2 states have call predecessors, (19), 4 states have return successors, (18), 3 states have call predecessors, (18), 4 states have call successors, (18) Word has length 134 [2021-11-17 00:34:56,660 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:34:56,724 INFO L225 Difference]: With dead ends: 34562 [2021-11-17 00:34:56,724 INFO L226 Difference]: Without dead ends: 18129 [2021-11-17 00:34:56,765 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 259 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-17 00:34:56,766 INFO L933 BasicCegarLoop]: 1444 mSDtfsCounter, 435 mSDsluCounter, 5234 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 520 SdHoareTripleChecker+Valid, 6678 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 60 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2021-11-17 00:34:56,766 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [520 Valid, 6678 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 116 Invalid, 0 Unknown, 60 Unchecked, 1.5s Time] [2021-11-17 00:34:56,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18129 states. [2021-11-17 00:34:57,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18129 to 18108. [2021-11-17 00:34:57,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18108 states, 13406 states have (on average 1.357078919886618) internal successors, (18193), 13764 states have internal predecessors, (18193), 3652 states have call successors, (3652), 1050 states have call predecessors, (3652), 1049 states have return successors, (4099), 3440 states have call predecessors, (4099), 3649 states have call successors, (4099) [2021-11-17 00:34:57,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18108 states to 18108 states and 25944 transitions. [2021-11-17 00:34:57,443 INFO L78 Accepts]: Start accepts. Automaton has 18108 states and 25944 transitions. Word has length 134 [2021-11-17 00:34:57,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:34:57,443 INFO L470 AbstractCegarLoop]: Abstraction has 18108 states and 25944 transitions. [2021-11-17 00:34:57,443 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 18.0) internal successors, (108), 7 states have internal predecessors, (108), 4 states have call successors, (19), 2 states have call predecessors, (19), 4 states have return successors, (18), 3 states have call predecessors, (18), 4 states have call successors, (18) [2021-11-17 00:34:57,443 INFO L276 IsEmpty]: Start isEmpty. Operand 18108 states and 25944 transitions. [2021-11-17 00:34:57,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-11-17 00:34:57,451 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:34:57,451 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:34:57,470 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-17 00:34:57,670 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:34:57,670 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:34:57,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:34:57,671 INFO L85 PathProgramCache]: Analyzing trace with hash -1774718592, now seen corresponding path program 1 times [2021-11-17 00:34:57,672 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:34:57,672 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1021376785] [2021-11-17 00:34:57,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:34:57,672 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:34:57,672 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:34:57,674 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:34:57,675 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-17 00:34:58,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:34:58,431 INFO L263 TraceCheckSpWp]: Trace formula consists of 1042 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-17 00:34:58,433 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:34:59,001 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-17 00:34:59,001 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:34:59,881 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-17 00:34:59,881 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:34:59,881 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1021376785] [2021-11-17 00:34:59,881 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1021376785] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:34:59,881 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:34:59,881 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2021-11-17 00:34:59,881 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1278772576] [2021-11-17 00:34:59,881 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:34:59,882 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 00:34:59,882 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:34:59,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 00:34:59,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:34:59,882 INFO L87 Difference]: Start difference. First operand 18108 states and 25944 transitions. Second operand has 8 states, 8 states have (on average 11.75) internal successors, (94), 6 states have internal predecessors, (94), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-17 00:35:00,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:35:00,346 INFO L93 Difference]: Finished difference Result 34727 states and 50029 transitions. [2021-11-17 00:35:00,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 00:35:00,348 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.75) internal successors, (94), 6 states have internal predecessors, (94), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) Word has length 134 [2021-11-17 00:35:00,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:35:00,414 INFO L225 Difference]: With dead ends: 34727 [2021-11-17 00:35:00,415 INFO L226 Difference]: Without dead ends: 18294 [2021-11-17 00:35:00,453 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 260 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 00:35:00,454 INFO L933 BasicCegarLoop]: 1202 mSDtfsCounter, 9 mSDsluCounter, 3594 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 4796 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 00:35:00,454 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 4796 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 00:35:00,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18294 states. [2021-11-17 00:35:00,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18294 to 18210. [2021-11-17 00:35:00,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18210 states, 13478 states have (on average 1.3560617302270366) internal successors, (18277), 13842 states have internal predecessors, (18277), 3664 states have call successors, (3664), 1050 states have call predecessors, (3664), 1067 states have return successors, (4219), 3464 states have call predecessors, (4219), 3661 states have call successors, (4219) [2021-11-17 00:35:01,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18210 states to 18210 states and 26160 transitions. [2021-11-17 00:35:01,027 INFO L78 Accepts]: Start accepts. Automaton has 18210 states and 26160 transitions. Word has length 134 [2021-11-17 00:35:01,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:35:01,028 INFO L470 AbstractCegarLoop]: Abstraction has 18210 states and 26160 transitions. [2021-11-17 00:35:01,028 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.75) internal successors, (94), 6 states have internal predecessors, (94), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-17 00:35:01,028 INFO L276 IsEmpty]: Start isEmpty. Operand 18210 states and 26160 transitions. [2021-11-17 00:35:01,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2021-11-17 00:35:01,035 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:35:01,035 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:35:01,055 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-17 00:35:01,243 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:35:01,243 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:35:01,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:35:01,244 INFO L85 PathProgramCache]: Analyzing trace with hash -1437416734, now seen corresponding path program 1 times [2021-11-17 00:35:01,245 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:35:01,245 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1445968581] [2021-11-17 00:35:01,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:35:01,245 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:35:01,245 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:35:01,246 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:35:01,247 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-17 00:35:01,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:35:01,850 INFO L263 TraceCheckSpWp]: Trace formula consists of 1111 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 00:35:01,852 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:35:02,555 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2021-11-17 00:35:02,556 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:35:03,055 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2021-11-17 00:35:03,056 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:35:03,056 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1445968581] [2021-11-17 00:35:03,056 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1445968581] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:35:03,056 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:35:03,056 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-17 00:35:03,056 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [870920193] [2021-11-17 00:35:03,056 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:35:03,057 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 00:35:03,057 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:35:03,057 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 00:35:03,057 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:35:03,057 INFO L87 Difference]: Start difference. First operand 18210 states and 26160 transitions. Second operand has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 00:35:03,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:35:03,901 INFO L93 Difference]: Finished difference Result 44292 states and 63625 transitions. [2021-11-17 00:35:03,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 00:35:03,902 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 138 [2021-11-17 00:35:03,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:35:03,981 INFO L225 Difference]: With dead ends: 44292 [2021-11-17 00:35:03,982 INFO L226 Difference]: Without dead ends: 25718 [2021-11-17 00:35:04,017 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 274 GetRequests, 273 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 00:35:04,018 INFO L933 BasicCegarLoop]: 1748 mSDtfsCounter, 897 mSDsluCounter, 1154 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 2902 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 00:35:04,019 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [897 Valid, 2902 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 00:35:04,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25718 states. [2021-11-17 00:35:04,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25718 to 25518. [2021-11-17 00:35:04,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25518 states, 18954 states have (on average 1.3580774506700433) internal successors, (25741), 19478 states have internal predecessors, (25741), 5026 states have call successors, (5026), 1502 states have call predecessors, (5026), 1537 states have return successors, (5928), 4715 states have call predecessors, (5928), 5023 states have call successors, (5928) [2021-11-17 00:35:04,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25518 states to 25518 states and 36695 transitions. [2021-11-17 00:35:04,710 INFO L78 Accepts]: Start accepts. Automaton has 25518 states and 36695 transitions. Word has length 138 [2021-11-17 00:35:04,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:35:04,710 INFO L470 AbstractCegarLoop]: Abstraction has 25518 states and 36695 transitions. [2021-11-17 00:35:04,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 00:35:04,711 INFO L276 IsEmpty]: Start isEmpty. Operand 25518 states and 36695 transitions. [2021-11-17 00:35:04,717 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2021-11-17 00:35:04,717 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:35:04,717 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:35:04,739 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-17 00:35:04,933 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:35:04,933 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:35:04,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:35:04,933 INFO L85 PathProgramCache]: Analyzing trace with hash 1581890694, now seen corresponding path program 1 times [2021-11-17 00:35:04,934 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:35:04,934 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1844250722] [2021-11-17 00:35:04,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:35:04,934 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:35:04,935 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:35:04,935 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:35:04,937 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-11-17 00:35:05,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:35:05,606 INFO L263 TraceCheckSpWp]: Trace formula consists of 1057 conjuncts, 29 conjunts are in the unsatisfiable core [2021-11-17 00:35:05,608 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:35:06,952 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-17 00:35:06,952 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:35:09,912 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-17 00:35:09,912 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:35:09,912 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1844250722] [2021-11-17 00:35:09,912 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1844250722] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:35:09,912 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:35:09,912 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11, 11] imperfect sequences [] total 20 [2021-11-17 00:35:09,912 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [808303983] [2021-11-17 00:35:09,912 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:35:09,913 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-11-17 00:35:09,913 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:35:09,913 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-11-17 00:35:09,913 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=334, Unknown=0, NotChecked=0, Total=380 [2021-11-17 00:35:09,913 INFO L87 Difference]: Start difference. First operand 25518 states and 36695 transitions. Second operand has 20 states, 20 states have (on average 5.2) internal successors, (104), 16 states have internal predecessors, (104), 6 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (17), 9 states have call predecessors, (17), 5 states have call successors, (17) [2021-11-17 00:35:11,959 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 00:35:23,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:35:23,139 INFO L93 Difference]: Finished difference Result 60036 states and 88087 transitions. [2021-11-17 00:35:23,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 00:35:23,140 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 5.2) internal successors, (104), 16 states have internal predecessors, (104), 6 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (17), 9 states have call predecessors, (17), 5 states have call successors, (17) Word has length 140 [2021-11-17 00:35:23,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:35:23,272 INFO L225 Difference]: With dead ends: 60036 [2021-11-17 00:35:23,272 INFO L226 Difference]: Without dead ends: 34563 [2021-11-17 00:35:23,349 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 261 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=117, Invalid=753, Unknown=0, NotChecked=0, Total=870 [2021-11-17 00:35:23,351 INFO L933 BasicCegarLoop]: 2335 mSDtfsCounter, 4714 mSDsluCounter, 32019 mSDsCounter, 0 mSdLazyCounter, 1256 mSolverCounterSat, 901 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4798 SdHoareTripleChecker+Valid, 34354 SdHoareTripleChecker+Invalid, 2158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 901 IncrementalHoareTripleChecker+Valid, 1256 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.6s IncrementalHoareTripleChecker+Time [2021-11-17 00:35:23,352 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4798 Valid, 34354 Invalid, 2158 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [901 Valid, 1256 Invalid, 1 Unknown, 0 Unchecked, 10.6s Time] [2021-11-17 00:35:23,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34563 states. [2021-11-17 00:35:24,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34563 to 25482. [2021-11-17 00:35:24,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25482 states, 18918 states have (on average 1.3567501850089863) internal successors, (25667), 19444 states have internal predecessors, (25667), 5026 states have call successors, (5026), 1502 states have call predecessors, (5026), 1537 states have return successors, (5928), 4713 states have call predecessors, (5928), 5023 states have call successors, (5928) [2021-11-17 00:35:24,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25482 states to 25482 states and 36621 transitions. [2021-11-17 00:35:24,427 INFO L78 Accepts]: Start accepts. Automaton has 25482 states and 36621 transitions. Word has length 140 [2021-11-17 00:35:24,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:35:24,427 INFO L470 AbstractCegarLoop]: Abstraction has 25482 states and 36621 transitions. [2021-11-17 00:35:24,428 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 5.2) internal successors, (104), 16 states have internal predecessors, (104), 6 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (17), 9 states have call predecessors, (17), 5 states have call successors, (17) [2021-11-17 00:35:24,428 INFO L276 IsEmpty]: Start isEmpty. Operand 25482 states and 36621 transitions. [2021-11-17 00:35:24,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-11-17 00:35:24,436 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:35:24,436 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:35:24,455 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Ended with exit code 0 [2021-11-17 00:35:24,655 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:35:24,655 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:35:24,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:35:24,656 INFO L85 PathProgramCache]: Analyzing trace with hash -1703720375, now seen corresponding path program 1 times [2021-11-17 00:35:24,657 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:35:24,657 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2099852849] [2021-11-17 00:35:24,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:35:24,657 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:35:24,657 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:35:24,658 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:35:24,659 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-11-17 00:35:25,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 00:35:25,372 INFO L263 TraceCheckSpWp]: Trace formula consists of 1124 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-17 00:35:25,374 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 00:35:25,801 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-17 00:35:25,801 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 00:35:26,181 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-11-17 00:35:26,182 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 00:35:26,182 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2099852849] [2021-11-17 00:35:26,182 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2099852849] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 00:35:26,182 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 00:35:26,182 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2021-11-17 00:35:26,182 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1461141157] [2021-11-17 00:35:26,182 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 00:35:26,183 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 00:35:26,183 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 00:35:26,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 00:35:26,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 00:35:26,192 INFO L87 Difference]: Start difference. First operand 25482 states and 36621 transitions. Second operand has 6 states, 6 states have (on average 19.5) internal successors, (117), 6 states have internal predecessors, (117), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 00:35:30,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 00:35:30,978 INFO L93 Difference]: Finished difference Result 95181 states and 143928 transitions. [2021-11-17 00:35:30,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-17 00:35:30,979 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 19.5) internal successors, (117), 6 states have internal predecessors, (117), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 161 [2021-11-17 00:35:30,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 00:35:31,231 INFO L225 Difference]: With dead ends: 95181 [2021-11-17 00:35:31,231 INFO L226 Difference]: Without dead ends: 69744 [2021-11-17 00:35:31,306 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 326 GetRequests, 319 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-17 00:35:31,306 INFO L933 BasicCegarLoop]: 2281 mSDtfsCounter, 2404 mSDsluCounter, 8012 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 390 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2628 SdHoareTripleChecker+Valid, 10293 SdHoareTripleChecker+Invalid, 768 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 390 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2021-11-17 00:35:31,306 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2628 Valid, 10293 Invalid, 768 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [390 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2021-11-17 00:35:31,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69744 states. [2021-11-17 00:35:32,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69744 to 25530. [2021-11-17 00:35:32,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25530 states, 18966 states have (on average 1.3558473057049456) internal successors, (25715), 19492 states have internal predecessors, (25715), 5026 states have call successors, (5026), 1502 states have call predecessors, (5026), 1537 states have return successors, (5928), 4713 states have call predecessors, (5928), 5023 states have call successors, (5928) [2021-11-17 00:35:32,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25530 states to 25530 states and 36669 transitions. [2021-11-17 00:35:32,953 INFO L78 Accepts]: Start accepts. Automaton has 25530 states and 36669 transitions. Word has length 161 [2021-11-17 00:35:32,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 00:35:32,953 INFO L470 AbstractCegarLoop]: Abstraction has 25530 states and 36669 transitions. [2021-11-17 00:35:32,953 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 19.5) internal successors, (117), 6 states have internal predecessors, (117), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 00:35:32,954 INFO L276 IsEmpty]: Start isEmpty. Operand 25530 states and 36669 transitions. [2021-11-17 00:35:32,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2021-11-17 00:35:32,962 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 00:35:32,962 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:35:32,981 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Forceful destruction successful, exit code 0 [2021-11-17 00:35:33,180 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:35:33,181 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 00:35:33,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 00:35:33,181 INFO L85 PathProgramCache]: Analyzing trace with hash 436590142, now seen corresponding path program 1 times [2021-11-17 00:35:33,182 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 00:35:33,182 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [480837591] [2021-11-17 00:35:33,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 00:35:33,182 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 00:35:33,183 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 00:35:33,183 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 00:35:33,184 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-11-17 00:35:51,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 00:35:51,338 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 00:35:59,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 00:36:00,835 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-17 00:36:00,836 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 00:36:00,836 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 00:36:00,883 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2021-11-17 00:36:01,049 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 00:36:01,052 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 00:36:01,054 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 00:36:01,088 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 00:36:01,250 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 12:36:01 BoogieIcfgContainer [2021-11-17 00:36:01,250 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 00:36:01,252 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 00:36:01,252 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 00:36:01,252 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 00:36:01,252 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 12:34:08" (3/4) ... [2021-11-17 00:36:01,255 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 00:36:01,255 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 00:36:01,256 INFO L158 Benchmark]: Toolchain (without parser) took 127035.37ms. Allocated memory was 60.8MB in the beginning and 3.6GB in the end (delta: 3.5GB). Free memory was 30.5MB in the beginning and 2.2GB in the end (delta: -2.1GB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. [2021-11-17 00:36:01,256 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 60.8MB. Free memory was 43.3MB in the beginning and 43.3MB in the end (delta: 45.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 00:36:01,256 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1608.24ms. Allocated memory was 60.8MB in the beginning and 151.0MB in the end (delta: 90.2MB). Free memory was 30.4MB in the beginning and 84.6MB in the end (delta: -54.3MB). Peak memory consumption was 47.4MB. Max. memory is 16.1GB. [2021-11-17 00:36:01,256 INFO L158 Benchmark]: Boogie Procedure Inliner took 175.80ms. Allocated memory is still 151.0MB. Free memory was 84.6MB in the beginning and 67.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-17 00:36:01,257 INFO L158 Benchmark]: Boogie Preprocessor took 157.17ms. Allocated memory is still 151.0MB. Free memory was 67.9MB in the beginning and 75.2MB in the end (delta: -7.3MB). Peak memory consumption was 10.2MB. Max. memory is 16.1GB. [2021-11-17 00:36:01,257 INFO L158 Benchmark]: RCFGBuilder took 12414.73ms. Allocated memory was 151.0MB in the beginning and 228.6MB in the end (delta: 77.6MB). Free memory was 75.2MB in the beginning and 159.0MB in the end (delta: -83.8MB). Peak memory consumption was 82.7MB. Max. memory is 16.1GB. [2021-11-17 00:36:01,258 INFO L158 Benchmark]: TraceAbstraction took 112670.10ms. Allocated memory was 228.6MB in the beginning and 3.6GB in the end (delta: 3.4GB). Free memory was 159.0MB in the beginning and 2.2GB in the end (delta: -2.0GB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. [2021-11-17 00:36:01,258 INFO L158 Benchmark]: Witness Printer took 3.16ms. Allocated memory is still 3.6GB. Free memory is still 2.2GB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 00:36:01,263 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 60.8MB. Free memory was 43.3MB in the beginning and 43.3MB in the end (delta: 45.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1608.24ms. Allocated memory was 60.8MB in the beginning and 151.0MB in the end (delta: 90.2MB). Free memory was 30.4MB in the beginning and 84.6MB in the end (delta: -54.3MB). Peak memory consumption was 47.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 175.80ms. Allocated memory is still 151.0MB. Free memory was 84.6MB in the beginning and 67.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 157.17ms. Allocated memory is still 151.0MB. Free memory was 67.9MB in the beginning and 75.2MB in the end (delta: -7.3MB). Peak memory consumption was 10.2MB. Max. memory is 16.1GB. * RCFGBuilder took 12414.73ms. Allocated memory was 151.0MB in the beginning and 228.6MB in the end (delta: 77.6MB). Free memory was 75.2MB in the beginning and 159.0MB in the end (delta: -83.8MB). Peak memory consumption was 82.7MB. Max. memory is 16.1GB. * TraceAbstraction took 112670.10ms. Allocated memory was 228.6MB in the beginning and 3.6GB in the end (delta: 3.4GB). Free memory was 159.0MB in the beginning and 2.2GB in the end (delta: -2.0GB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. * Witness Printer took 3.16ms. Allocated memory is still 3.6GB. Free memory is still 2.2GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527. Possible FailurePath: [L7077] int LDV_IN_INTERRUPT = 1; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7079] int ldv_state_variable_2 ; [L7080] int ref_cnt ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L7082] int ldv_state_variable_1 ; [L7083] int usb_counter ; [L7084] struct sk_buff *usb_ops_group1 ; [L7085] int ldv_state_variable_0 ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L7170] static struct semaphore add_remove_card_sem ; [L7171] static struct usb_card_rec *usb_card ; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; [L8586] int ldv_retval_0 ; [L8587] int ldv_retval_4 ; [L8588] int ldv_retval_1 ; [L8592] int ldv_retval_3 ; [L8593] int ldv_retval_2 ; [L8989] int INTERF_STATE = 0; [L8990] int SERIAL_STATE = 0; [L8991] void *usb_intfdata = 0; [L8992] struct urb *usb_urb = 0; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8995] int completeFnIntCounter = 0; [L8996] int completeFnBulkCounter = 0; [L8997] void (*completeFnInt)(struct urb * ) ; [L8998] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=1, ldvarg3={17592186046723:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=2147745792, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=1, ldvarg3={17592186046723:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=1, ldvarg3={17592186046723:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=1, ldvarg3={17592186046723:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={17592186046723:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={17592186046724:0}, descriptor.flags=0, descriptor___0={9007199256838147:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={17592186046724:0}, descriptor.flags=0, descriptor___0={9007199256838147:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={17592186046724:0}, descriptor___0={9007199256838147:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, sem={18691697674372:0}, sem={18691697674372:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={70368744177664:0}, ldv_func_arg1={70368744177664:0}, ldv_func_arg2={165:163}, ldv_func_arg2={165:163}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={17592186046724:0}, descriptor___0={9007199256838147:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={17592186046724:0}, descriptor___0={9007199256838147:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={17592186046724:0}, descriptor___0={9007199256838147:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={18691697674372:0}, card={0:0}, card->usb_boot_state=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, p={4398046511361:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={4398046511361:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, p={4398046511361:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={4398046511361:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, \result={4398046511361:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, p={4398046511361:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={4398046511361:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={4398046511361:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4398046511361:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}, value={4398046511361:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=-2147483648, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4398046511361:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}, value={4398046511361:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4398046511361:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={17592186046597:0}, value={4398046511361:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4398046511361:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}, value={4398046511361:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result={4398046511361:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4398046511361:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}, value={4398046511361:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={4398046511361:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={4398046511361:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4398046511361:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={18691697674372:0}, card={0:0}, card->rx_cmd.urb={4398046511361:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=2147483656, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={18691697674372:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={18691697674372:0}, card={0:0}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={18691697674372:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={18691697674372:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={18691697674372:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, arg={70368744177664:0}, arg={70368744177664:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=1, ldvarg2={0:0}, ldvarg3={17592186046723:0}, ldvarg4={0:0}, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:163}, add_remove_card_sem={18691697674372:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={70368744177664:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={18691697674400:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={17592186046593:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={4398046511361:0}, usbdriver_name={17592186046597:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 857 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 112.4s, OverallIterations: 17, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 41.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 3 mSolverCounterUnknown, 21897 SdHoareTripleChecker+Valid, 29.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 21417 mSDsluCounter, 100841 SdHoareTripleChecker+Invalid, 27.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 126 IncrementalHoareTripleChecker+Unchecked, 76549 mSDsCounter, 2375 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2860 IncrementalHoareTripleChecker+Invalid, 5364 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2375 mSolverCounterUnsat, 24292 mSDtfsCounter, 2860 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2946 GetRequests, 2854 SyntacticMatches, 2 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 99 ImplicationChecksByTransitivity, 6.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=25530occurred in iteration=16, InterpolantAutomatonStates: 95, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.6s AutomataMinimizationTime, 16 MinimizatonAttempts, 54214 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.6s SsaConstructionTime, 22.9s SatisfiabilityAnalysisTime, 22.6s InterpolantComputationTime, 1631 NumberOfCodeBlocks, 1615 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 2918 ConstructedInterpolants, 4 QuantifiedInterpolants, 5246 SizeOfPredicates, 45 NumberOfNonLiveVariables, 14477 ConjunctsInSsa, 88 ConjunctsInUnsatCore, 32 InterpolantComputations, 30 PerfectInterpolantSequences, 1518/1524 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 00:36:01,334 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample