./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:25:16,123 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:25:16,125 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:25:16,160 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:25:16,161 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:25:16,162 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:25:16,164 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:25:16,166 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:25:16,168 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:25:16,170 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:25:16,171 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:25:16,172 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:25:16,173 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:25:16,174 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:25:16,176 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:25:16,177 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:25:16,178 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:25:16,179 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:25:16,182 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:25:16,184 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:25:16,186 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:25:16,194 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:25:16,195 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:25:16,196 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:25:16,200 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:25:16,201 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:25:16,201 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:25:16,202 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:25:16,203 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:25:16,209 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:25:16,210 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:25:16,218 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:25:16,220 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:25:16,221 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:25:16,222 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:25:16,223 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:25:16,223 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:25:16,223 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:25:16,224 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:25:16,225 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:25:16,225 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:25:16,226 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-20 06:25:16,278 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:25:16,279 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:25:16,279 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:25:16,279 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:25:16,280 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:25:16,280 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:25:16,281 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:25:16,281 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:25:16,281 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:25:16,281 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:25:16,281 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 06:25:16,282 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:25:16,282 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:25:16,282 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:25:16,282 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:25:16,282 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:25:16,282 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:25:16,283 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:25:16,283 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:25:16,283 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:25:16,283 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:25:16,283 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:25:16,284 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:25:16,284 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:25:16,284 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:25:16,284 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 06:25:16,284 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 06:25:16,290 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:25:16,291 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:25:16,292 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:25:16,292 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:25:16,293 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2021-11-20 06:25:16,531 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:25:16,552 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:25:16,554 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:25:16,556 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:25:16,556 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:25:16,558 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-11-20 06:25:16,617 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/da4a5e5cb/72cca60edf174a2fb673c14251997e9b/FLAG98153b00b [2021-11-20 06:25:17,509 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:25:17,510 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-11-20 06:25:17,556 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/da4a5e5cb/72cca60edf174a2fb673c14251997e9b/FLAG98153b00b [2021-11-20 06:25:17,958 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/da4a5e5cb/72cca60edf174a2fb673c14251997e9b [2021-11-20 06:25:17,960 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:25:17,961 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:25:17,963 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:25:17,963 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:25:17,971 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:25:17,972 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:25:17" (1/1) ... [2021-11-20 06:25:17,973 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56e4149c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:17, skipping insertion in model container [2021-11-20 06:25:17,973 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:25:17" (1/1) ... [2021-11-20 06:25:17,980 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:25:18,189 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:25:19,225 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-11-20 06:25:20,089 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:25:20,119 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:25:20,291 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-11-20 06:25:20,553 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:25:20,763 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:25:20,765 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20 WrapperNode [2021-11-20 06:25:20,765 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:25:20,767 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:25:20,767 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:25:20,768 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:25:20,775 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:20,902 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,129 INFO L137 Inliner]: procedures = 247, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6382 [2021-11-20 06:25:21,129 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:25:21,130 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:25:21,130 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:25:21,131 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:25:21,174 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,174 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,227 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,238 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,409 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,449 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,480 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,514 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:25:21,516 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:25:21,516 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:25:21,517 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:25:21,518 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (1/1) ... [2021-11-20 06:25:21,527 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:25:21,539 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:25:21,555 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:25:21,575 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:25:21,607 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-20 06:25:21,607 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-20 06:25:21,607 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2021-11-20 06:25:21,608 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2021-11-20 06:25:21,608 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 06:25:21,608 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 06:25:21,608 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 06:25:21,609 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 06:25:21,609 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-20 06:25:21,609 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-20 06:25:21,609 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-11-20 06:25:21,609 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-11-20 06:25:21,610 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 06:25:21,610 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 06:25:21,610 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2021-11-20 06:25:21,610 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2021-11-20 06:25:21,610 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-20 06:25:21,610 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-20 06:25:21,611 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-20 06:25:21,611 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-20 06:25:21,611 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-11-20 06:25:21,611 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-11-20 06:25:21,611 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-11-20 06:25:21,612 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-11-20 06:25:21,612 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2021-11-20 06:25:21,612 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2021-11-20 06:25:21,612 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-11-20 06:25:21,612 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-11-20 06:25:21,612 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 06:25:21,613 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 06:25:21,613 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2021-11-20 06:25:21,613 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2021-11-20 06:25:21,613 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 06:25:21,613 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 06:25:21,614 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 06:25:21,614 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 06:25:21,614 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2021-11-20 06:25:21,614 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2021-11-20 06:25:21,614 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-11-20 06:25:21,614 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-11-20 06:25:21,615 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2021-11-20 06:25:21,615 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2021-11-20 06:25:21,615 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 06:25:21,615 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 06:25:21,615 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2021-11-20 06:25:21,616 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2021-11-20 06:25:21,616 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-11-20 06:25:21,616 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-11-20 06:25:21,616 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-11-20 06:25:21,616 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2021-11-20 06:25:21,617 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2021-11-20 06:25:21,617 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 06:25:21,617 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 06:25:21,617 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2021-11-20 06:25:21,618 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2021-11-20 06:25:21,618 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2021-11-20 06:25:21,618 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2021-11-20 06:25:21,620 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2021-11-20 06:25:21,620 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2021-11-20 06:25:21,621 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-11-20 06:25:21,621 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-11-20 06:25:21,622 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2021-11-20 06:25:21,622 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2021-11-20 06:25:21,622 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-20 06:25:21,623 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-20 06:25:21,623 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-20 06:25:21,623 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2021-11-20 06:25:21,623 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2021-11-20 06:25:21,623 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2021-11-20 06:25:21,624 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2021-11-20 06:25:21,624 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2021-11-20 06:25:21,624 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2021-11-20 06:25:21,624 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-20 06:25:21,624 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2021-11-20 06:25:21,625 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2021-11-20 06:25:21,625 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-20 06:25:21,625 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2021-11-20 06:25:21,626 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2021-11-20 06:25:21,626 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 06:25:21,626 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 06:25:21,627 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2021-11-20 06:25:21,627 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2021-11-20 06:25:21,627 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2021-11-20 06:25:21,627 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2021-11-20 06:25:21,627 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2021-11-20 06:25:21,627 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2021-11-20 06:25:21,628 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-11-20 06:25:21,628 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-11-20 06:25:21,628 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2021-11-20 06:25:21,628 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2021-11-20 06:25:21,629 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 06:25:21,629 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 06:25:21,629 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2021-11-20 06:25:21,630 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2021-11-20 06:25:21,630 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2021-11-20 06:25:21,630 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2021-11-20 06:25:21,631 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-20 06:25:21,631 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2021-11-20 06:25:21,631 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2021-11-20 06:25:21,632 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-11-20 06:25:21,632 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-11-20 06:25:21,633 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2021-11-20 06:25:21,633 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2021-11-20 06:25:21,633 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 06:25:21,633 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 06:25:21,633 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 06:25:21,633 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-20 06:25:21,634 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-20 06:25:21,634 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2021-11-20 06:25:21,634 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2021-11-20 06:25:21,634 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:25:21,634 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2021-11-20 06:25:21,635 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2021-11-20 06:25:21,636 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2021-11-20 06:25:21,636 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2021-11-20 06:25:21,636 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 06:25:21,636 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-11-20 06:25:21,637 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-11-20 06:25:21,638 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2021-11-20 06:25:21,641 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2021-11-20 06:25:21,641 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2021-11-20 06:25:21,641 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2021-11-20 06:25:21,641 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-11-20 06:25:21,643 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-11-20 06:25:21,644 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 06:25:21,644 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-20 06:25:21,645 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:25:21,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:25:21,650 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2021-11-20 06:25:21,650 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2021-11-20 06:25:21,651 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2021-11-20 06:25:21,651 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2021-11-20 06:25:22,535 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:25:22,538 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:25:23,395 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 06:25:30,450 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:25:30,470 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:25:30,470 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 06:25:30,474 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:25:30 BoogieIcfgContainer [2021-11-20 06:25:30,475 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:25:30,477 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:25:30,477 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:25:30,480 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:25:30,481 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:25:17" (1/3) ... [2021-11-20 06:25:30,481 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8a0ce99 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:25:30, skipping insertion in model container [2021-11-20 06:25:30,482 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:25:20" (2/3) ... [2021-11-20 06:25:30,482 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8a0ce99 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:25:30, skipping insertion in model container [2021-11-20 06:25:30,482 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:25:30" (3/3) ... [2021-11-20 06:25:30,483 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-11-20 06:25:30,489 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:25:30,489 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:25:30,544 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:25:30,551 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:25:30,551 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:25:30,600 INFO L276 IsEmpty]: Start isEmpty. Operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2021-11-20 06:25:30,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-11-20 06:25:30,613 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:25:30,617 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:25:30,618 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:25:30,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:25:30,627 INFO L85 PathProgramCache]: Analyzing trace with hash -1790507018, now seen corresponding path program 1 times [2021-11-20 06:25:30,639 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:25:30,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1566450354] [2021-11-20 06:25:30,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:25:30,640 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:25:31,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:31,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:25:31,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:31,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:25:31,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:31,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:25:31,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:31,349 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:25:31,351 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:25:31,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1566450354] [2021-11-20 06:25:31,352 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1566450354] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:25:31,353 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:25:31,353 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-20 06:25:31,355 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704272530] [2021-11-20 06:25:31,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:25:31,361 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:25:31,362 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:25:31,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:25:31,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:25:31,409 INFO L87 Difference]: Start difference. First operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 06:25:33,844 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:25:39,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:25:39,765 INFO L93 Difference]: Finished difference Result 4845 states and 7288 transitions. [2021-11-20 06:25:39,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:25:39,768 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2021-11-20 06:25:39,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:25:39,838 INFO L225 Difference]: With dead ends: 4845 [2021-11-20 06:25:39,840 INFO L226 Difference]: Without dead ends: 3260 [2021-11-20 06:25:39,855 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:25:39,859 INFO L933 BasicCegarLoop]: 2534 mSDtfsCounter, 2777 mSDsluCounter, 3273 mSDsCounter, 0 mSdLazyCounter, 1220 mSolverCounterSat, 776 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2973 SdHoareTripleChecker+Valid, 5807 SdHoareTripleChecker+Invalid, 1997 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 776 IncrementalHoareTripleChecker+Valid, 1220 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:25:39,860 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2973 Valid, 5807 Invalid, 1997 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [776 Valid, 1220 Invalid, 1 Unknown, 0 Unchecked, 7.9s Time] [2021-11-20 06:25:39,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3260 states. [2021-11-20 06:25:40,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3260 to 3042. [2021-11-20 06:25:40,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3042 states, 2325 states have (on average 1.4055913978494623) internal successors, (3268), 2349 states have internal predecessors, (3268), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2021-11-20 06:25:40,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3042 states to 3042 states and 4479 transitions. [2021-11-20 06:25:40,192 INFO L78 Accepts]: Start accepts. Automaton has 3042 states and 4479 transitions. Word has length 39 [2021-11-20 06:25:40,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:25:40,193 INFO L470 AbstractCegarLoop]: Abstraction has 3042 states and 4479 transitions. [2021-11-20 06:25:40,194 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 06:25:40,194 INFO L276 IsEmpty]: Start isEmpty. Operand 3042 states and 4479 transitions. [2021-11-20 06:25:40,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-11-20 06:25:40,208 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:25:40,208 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:25:40,208 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 06:25:40,209 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:25:40,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:25:40,209 INFO L85 PathProgramCache]: Analyzing trace with hash 1277499630, now seen corresponding path program 1 times [2021-11-20 06:25:40,210 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:25:40,210 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1461143423] [2021-11-20 06:25:40,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:25:40,210 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:25:40,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:40,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:25:40,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:40,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:25:40,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:40,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:25:40,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:40,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:25:40,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:40,927 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:25:40,927 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:25:40,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1461143423] [2021-11-20 06:25:40,928 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1461143423] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:25:40,928 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:25:40,928 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:25:40,928 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676543598] [2021-11-20 06:25:40,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:25:40,930 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:25:40,930 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:25:40,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:25:40,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:25:40,932 INFO L87 Difference]: Start difference. First operand 3042 states and 4479 transitions. Second operand has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:25:43,316 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:25:48,526 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:25:52,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:25:52,715 INFO L93 Difference]: Finished difference Result 9539 states and 14216 transitions. [2021-11-20 06:25:52,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:25:52,716 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2021-11-20 06:25:52,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:25:52,771 INFO L225 Difference]: With dead ends: 9539 [2021-11-20 06:25:52,775 INFO L226 Difference]: Without dead ends: 6498 [2021-11-20 06:25:52,793 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:25:52,794 INFO L933 BasicCegarLoop]: 2610 mSDtfsCounter, 2780 mSDsluCounter, 8132 mSDsCounter, 0 mSdLazyCounter, 1882 mSolverCounterSat, 748 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2979 SdHoareTripleChecker+Valid, 10742 SdHoareTripleChecker+Invalid, 2632 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 748 IncrementalHoareTripleChecker+Valid, 1882 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:25:52,795 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2979 Valid, 10742 Invalid, 2632 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [748 Valid, 1882 Invalid, 2 Unknown, 0 Unchecked, 11.2s Time] [2021-11-20 06:25:52,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6498 states. [2021-11-20 06:25:53,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6498 to 6092. [2021-11-20 06:25:53,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6092 states, 4657 states have (on average 1.4056259394459953) internal successors, (6546), 4707 states have internal predecessors, (6546), 1208 states have call successors, (1208), 221 states have call predecessors, (1208), 226 states have return successors, (1237), 1211 states have call predecessors, (1237), 1207 states have call successors, (1237) [2021-11-20 06:25:53,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6092 states to 6092 states and 8991 transitions. [2021-11-20 06:25:53,215 INFO L78 Accepts]: Start accepts. Automaton has 6092 states and 8991 transitions. Word has length 49 [2021-11-20 06:25:53,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:25:53,219 INFO L470 AbstractCegarLoop]: Abstraction has 6092 states and 8991 transitions. [2021-11-20 06:25:53,219 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:25:53,219 INFO L276 IsEmpty]: Start isEmpty. Operand 6092 states and 8991 transitions. [2021-11-20 06:25:53,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-20 06:25:53,238 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:25:53,238 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:25:53,238 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 06:25:53,239 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:25:53,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:25:53,239 INFO L85 PathProgramCache]: Analyzing trace with hash 41662539, now seen corresponding path program 1 times [2021-11-20 06:25:53,240 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:25:53,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [985523451] [2021-11-20 06:25:53,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:25:53,240 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:25:53,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:25:53,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:25:53,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:25:53,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:25:53,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-11-20 06:25:53,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:25:53,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-11-20 06:25:53,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:25:53,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:25:53,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-20 06:25:53,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-11-20 06:25:53,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:25:53,624 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2021-11-20 06:25:53,624 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:25:53,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [985523451] [2021-11-20 06:25:53,624 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [985523451] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:25:53,625 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:25:53,625 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:25:53,625 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [10171529] [2021-11-20 06:25:53,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:25:53,626 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:25:53,626 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:25:53,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:25:53,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:25:53,627 INFO L87 Difference]: Start difference. First operand 6092 states and 8991 transitions. Second operand has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-20 06:25:55,826 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:26:00,953 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:26:00,953 INFO L93 Difference]: Finished difference Result 13999 states and 20777 transitions. [2021-11-20 06:26:00,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:26:00,955 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2021-11-20 06:26:00,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:26:01,013 INFO L225 Difference]: With dead ends: 13999 [2021-11-20 06:26:01,013 INFO L226 Difference]: Without dead ends: 7917 [2021-11-20 06:26:01,037 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:26:01,040 INFO L933 BasicCegarLoop]: 2220 mSDtfsCounter, 1720 mSDsluCounter, 3050 mSDsCounter, 0 mSdLazyCounter, 1158 mSolverCounterSat, 1188 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1767 SdHoareTripleChecker+Valid, 5270 SdHoareTripleChecker+Invalid, 2347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1188 IncrementalHoareTripleChecker+Valid, 1158 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:26:01,041 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1767 Valid, 5270 Invalid, 2347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1188 Valid, 1158 Invalid, 1 Unknown, 0 Unchecked, 6.9s Time] [2021-11-20 06:26:01,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7917 states. [2021-11-20 06:26:01,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7917 to 7421. [2021-11-20 06:26:01,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7421 states, 5764 states have (on average 1.4191533657182511) internal successors, (8180), 5814 states have internal predecessors, (8180), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 295 states have return successors, (1390), 1364 states have call predecessors, (1390), 1360 states have call successors, (1390) [2021-11-20 06:26:01,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7421 states to 7421 states and 10931 transitions. [2021-11-20 06:26:01,466 INFO L78 Accepts]: Start accepts. Automaton has 7421 states and 10931 transitions. Word has length 117 [2021-11-20 06:26:01,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:26:01,468 INFO L470 AbstractCegarLoop]: Abstraction has 7421 states and 10931 transitions. [2021-11-20 06:26:01,469 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-20 06:26:01,469 INFO L276 IsEmpty]: Start isEmpty. Operand 7421 states and 10931 transitions. [2021-11-20 06:26:01,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2021-11-20 06:26:01,493 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:26:01,493 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:26:01,493 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 06:26:01,493 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:26:01,494 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:26:01,494 INFO L85 PathProgramCache]: Analyzing trace with hash -2139715759, now seen corresponding path program 1 times [2021-11-20 06:26:01,494 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:26:01,495 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [892675199] [2021-11-20 06:26:01,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:26:01,495 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:26:01,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:26:01,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:26:01,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:26:01,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:26:01,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:26:01,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 06:26:01,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 06:26:01,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-11-20 06:26:01,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-11-20 06:26:01,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 06:26:01,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:01,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:01,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:26:01,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:02,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:02,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:02,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:02,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:02,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-11-20 06:26:02,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:02,193 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2021-11-20 06:26:02,193 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:26:02,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [892675199] [2021-11-20 06:26:02,194 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [892675199] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:26:02,194 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:26:02,194 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:26:02,194 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [707086117] [2021-11-20 06:26:02,195 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:26:02,195 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:26:02,195 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:26:02,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:26:02,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:26:02,196 INFO L87 Difference]: Start difference. First operand 7421 states and 10931 transitions. Second operand has 8 states, 8 states have (on average 12.75) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-20 06:26:04,558 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:26:11,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:26:11,560 INFO L93 Difference]: Finished difference Result 15293 states and 22715 transitions. [2021-11-20 06:26:11,563 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:26:11,563 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.75) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 157 [2021-11-20 06:26:11,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:26:11,621 INFO L225 Difference]: With dead ends: 15293 [2021-11-20 06:26:11,621 INFO L226 Difference]: Without dead ends: 7889 [2021-11-20 06:26:11,653 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:26:11,654 INFO L933 BasicCegarLoop]: 2178 mSDtfsCounter, 603 mSDsluCounter, 8084 mSDsCounter, 0 mSdLazyCounter, 2418 mSolverCounterSat, 685 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 617 SdHoareTripleChecker+Valid, 10262 SdHoareTripleChecker+Invalid, 3104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 685 IncrementalHoareTripleChecker+Valid, 2418 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:26:11,655 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [617 Valid, 10262 Invalid, 3104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [685 Valid, 2418 Invalid, 1 Unknown, 0 Unchecked, 9.0s Time] [2021-11-20 06:26:11,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7889 states. [2021-11-20 06:26:12,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7889 to 7421. [2021-11-20 06:26:12,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7421 states, 5760 states have (on average 1.4180555555555556) internal successors, (8168), 5812 states have internal predecessors, (8168), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 299 states have return successors, (1398), 1366 states have call predecessors, (1398), 1360 states have call successors, (1398) [2021-11-20 06:26:12,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7421 states to 7421 states and 10927 transitions. [2021-11-20 06:26:12,049 INFO L78 Accepts]: Start accepts. Automaton has 7421 states and 10927 transitions. Word has length 157 [2021-11-20 06:26:12,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:26:12,051 INFO L470 AbstractCegarLoop]: Abstraction has 7421 states and 10927 transitions. [2021-11-20 06:26:12,052 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.75) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-20 06:26:12,052 INFO L276 IsEmpty]: Start isEmpty. Operand 7421 states and 10927 transitions. [2021-11-20 06:26:12,072 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 165 [2021-11-20 06:26:12,072 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:26:12,073 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:26:12,073 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 06:26:12,073 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:26:12,074 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:26:12,074 INFO L85 PathProgramCache]: Analyzing trace with hash -55648936, now seen corresponding path program 1 times [2021-11-20 06:26:12,074 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:26:12,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748770833] [2021-11-20 06:26:12,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:26:12,075 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:26:12,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:26:12,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:26:12,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:26:12,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:26:12,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:26:12,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 06:26:12,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 06:26:12,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-11-20 06:26:12,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-11-20 06:26:12,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 06:26:12,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:12,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:26:12,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:12,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:12,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:26:12,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2021-11-20 06:26:12,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:12,626 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-11-20 06:26:12,626 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:26:12,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748770833] [2021-11-20 06:26:12,626 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [748770833] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:26:12,626 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:26:12,627 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:26:12,627 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043421269] [2021-11-20 06:26:12,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:26:12,628 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:26:12,628 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:26:12,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:26:12,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:26:12,629 INFO L87 Difference]: Start difference. First operand 7421 states and 10927 transitions. Second operand has 8 states, 8 states have (on average 13.25) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 5 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 06:26:14,976 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:26:19,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:26:19,681 INFO L93 Difference]: Finished difference Result 15369 states and 22867 transitions. [2021-11-20 06:26:19,684 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:26:19,684 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.25) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 5 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 164 [2021-11-20 06:26:19,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:26:19,727 INFO L225 Difference]: With dead ends: 15369 [2021-11-20 06:26:19,727 INFO L226 Difference]: Without dead ends: 7965 [2021-11-20 06:26:19,760 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:26:19,761 INFO L933 BasicCegarLoop]: 2181 mSDtfsCounter, 909 mSDsluCounter, 6999 mSDsCounter, 0 mSdLazyCounter, 1764 mSolverCounterSat, 1026 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 924 SdHoareTripleChecker+Valid, 9180 SdHoareTripleChecker+Invalid, 2791 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1026 IncrementalHoareTripleChecker+Valid, 1764 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:26:19,761 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [924 Valid, 9180 Invalid, 2791 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1026 Valid, 1764 Invalid, 1 Unknown, 0 Unchecked, 6.8s Time] [2021-11-20 06:26:19,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7965 states. [2021-11-20 06:26:20,080 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7965 to 7453. [2021-11-20 06:26:20,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7453 states, 5784 states have (on average 1.4163208852005533) internal successors, (8192), 5836 states have internal predecessors, (8192), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 307 states have return successors, (1462), 1374 states have call predecessors, (1462), 1360 states have call successors, (1462) [2021-11-20 06:26:20,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7453 states to 7453 states and 11015 transitions. [2021-11-20 06:26:20,132 INFO L78 Accepts]: Start accepts. Automaton has 7453 states and 11015 transitions. Word has length 164 [2021-11-20 06:26:20,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:26:20,134 INFO L470 AbstractCegarLoop]: Abstraction has 7453 states and 11015 transitions. [2021-11-20 06:26:20,134 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.25) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 5 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 06:26:20,135 INFO L276 IsEmpty]: Start isEmpty. Operand 7453 states and 11015 transitions. [2021-11-20 06:26:20,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 167 [2021-11-20 06:26:20,152 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:26:20,152 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:26:20,153 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 06:26:20,153 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:26:20,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:26:20,154 INFO L85 PathProgramCache]: Analyzing trace with hash -717777381, now seen corresponding path program 1 times [2021-11-20 06:26:20,155 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:26:20,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [306512276] [2021-11-20 06:26:20,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:26:20,155 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:26:21,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:26:21,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:26:21,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:26:21,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:26:21,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:26:21,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 06:26:21,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 06:26:21,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-11-20 06:26:21,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-11-20 06:26:21,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 06:26:21,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:21,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-11-20 06:26:21,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:21,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:21,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:26:21,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-11-20 06:26:21,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:21,725 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-11-20 06:26:21,725 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:26:21,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [306512276] [2021-11-20 06:26:21,726 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [306512276] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:26:21,726 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:26:21,726 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:26:21,726 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1122547177] [2021-11-20 06:26:21,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:26:21,727 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:26:21,727 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:26:21,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:26:21,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:26:21,728 INFO L87 Difference]: Start difference. First operand 7453 states and 11015 transitions. Second operand has 8 states, 8 states have (on average 13.5) internal successors, (108), 5 states have internal predecessors, (108), 2 states have call successors, (17), 5 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 06:26:24,079 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:26:26,565 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:26:39,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:26:39,679 INFO L93 Difference]: Finished difference Result 15790 states and 23451 transitions. [2021-11-20 06:26:39,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 06:26:39,682 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.5) internal successors, (108), 5 states have internal predecessors, (108), 2 states have call successors, (17), 5 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 166 [2021-11-20 06:26:39,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:26:39,708 INFO L225 Difference]: With dead ends: 15790 [2021-11-20 06:26:39,708 INFO L226 Difference]: Without dead ends: 8344 [2021-11-20 06:26:39,725 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2021-11-20 06:26:39,725 INFO L933 BasicCegarLoop]: 4240 mSDtfsCounter, 2770 mSDsluCounter, 13868 mSDsCounter, 0 mSdLazyCounter, 4476 mSolverCounterSat, 846 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2966 SdHoareTripleChecker+Valid, 18108 SdHoareTripleChecker+Invalid, 5324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 846 IncrementalHoareTripleChecker+Valid, 4476 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:26:39,726 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2966 Valid, 18108 Invalid, 5324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [846 Valid, 4476 Invalid, 2 Unknown, 0 Unchecked, 17.5s Time] [2021-11-20 06:26:39,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8344 states. [2021-11-20 06:26:40,043 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8344 to 7492. [2021-11-20 06:26:40,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7492 states, 5814 states have (on average 1.41468868249054) internal successors, (8225), 5869 states have internal predecessors, (8225), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 310 states have return successors, (1468), 1377 states have call predecessors, (1468), 1366 states have call successors, (1468) [2021-11-20 06:26:40,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7492 states to 7492 states and 11060 transitions. [2021-11-20 06:26:40,091 INFO L78 Accepts]: Start accepts. Automaton has 7492 states and 11060 transitions. Word has length 166 [2021-11-20 06:26:40,092 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:26:40,092 INFO L470 AbstractCegarLoop]: Abstraction has 7492 states and 11060 transitions. [2021-11-20 06:26:40,092 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.5) internal successors, (108), 5 states have internal predecessors, (108), 2 states have call successors, (17), 5 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 06:26:40,092 INFO L276 IsEmpty]: Start isEmpty. Operand 7492 states and 11060 transitions. [2021-11-20 06:26:40,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-11-20 06:26:40,110 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:26:40,110 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:26:40,110 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 06:26:40,110 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:26:40,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:26:40,111 INFO L85 PathProgramCache]: Analyzing trace with hash -123678410, now seen corresponding path program 1 times [2021-11-20 06:26:40,111 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:26:40,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1950338752] [2021-11-20 06:26:40,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:26:40,112 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:26:42,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:26:42,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:26:42,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:26:42,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:26:42,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:26:42,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 06:26:42,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 06:26:42,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-20 06:26:42,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-20 06:26:42,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 06:26:42,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-11-20 06:26:42,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:42,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-11-20 06:26:42,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:42,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:42,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:43,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:26:43,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:43,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:26:43,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:43,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2021-11-20 06:26:43,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:26:43,266 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-11-20 06:26:43,266 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:26:43,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1950338752] [2021-11-20 06:26:43,266 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1950338752] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:26:43,267 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:26:43,267 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [18] imperfect sequences [] total 18 [2021-11-20 06:26:43,267 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737534436] [2021-11-20 06:26:43,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:26:43,268 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2021-11-20 06:26:43,268 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:26:43,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2021-11-20 06:26:43,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=269, Unknown=0, NotChecked=0, Total=306 [2021-11-20 06:26:43,269 INFO L87 Difference]: Start difference. First operand 7492 states and 11060 transitions. Second operand has 18 states, 17 states have (on average 6.529411764705882) internal successors, (111), 11 states have internal predecessors, (111), 3 states have call successors, (18), 5 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2021-11-20 06:26:45,973 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:26:55,974 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:27:04,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:27:04,113 INFO L93 Difference]: Finished difference Result 19805 states and 30193 transitions. [2021-11-20 06:27:04,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-20 06:27:04,117 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 6.529411764705882) internal successors, (111), 11 states have internal predecessors, (111), 3 states have call successors, (18), 5 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 172 [2021-11-20 06:27:04,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:27:04,171 INFO L225 Difference]: With dead ends: 19805 [2021-11-20 06:27:04,171 INFO L226 Difference]: Without dead ends: 12330 [2021-11-20 06:27:04,195 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=73, Invalid=479, Unknown=0, NotChecked=0, Total=552 [2021-11-20 06:27:04,196 INFO L933 BasicCegarLoop]: 3648 mSDtfsCounter, 1398 mSDsluCounter, 43522 mSDsCounter, 0 mSdLazyCounter, 6680 mSolverCounterSat, 350 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1657 SdHoareTripleChecker+Valid, 47170 SdHoareTripleChecker+Invalid, 7032 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 350 IncrementalHoareTripleChecker+Valid, 6680 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:27:04,196 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1657 Valid, 47170 Invalid, 7032 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [350 Valid, 6680 Invalid, 2 Unknown, 0 Unchecked, 20.1s Time] [2021-11-20 06:27:04,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12330 states. [2021-11-20 06:27:04,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12330 to 7506. [2021-11-20 06:27:04,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7506 states, 5826 states have (on average 1.4131479574322006) internal successors, (8233), 5877 states have internal predecessors, (8233), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-11-20 06:27:04,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7506 states to 7506 states and 11078 transitions. [2021-11-20 06:27:04,807 INFO L78 Accepts]: Start accepts. Automaton has 7506 states and 11078 transitions. Word has length 172 [2021-11-20 06:27:04,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:27:04,807 INFO L470 AbstractCegarLoop]: Abstraction has 7506 states and 11078 transitions. [2021-11-20 06:27:04,808 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 6.529411764705882) internal successors, (111), 11 states have internal predecessors, (111), 3 states have call successors, (18), 5 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2021-11-20 06:27:04,808 INFO L276 IsEmpty]: Start isEmpty. Operand 7506 states and 11078 transitions. [2021-11-20 06:27:04,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2021-11-20 06:27:04,826 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:27:04,827 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:27:04,827 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 06:27:04,827 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:27:04,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:27:04,829 INFO L85 PathProgramCache]: Analyzing trace with hash -1247287038, now seen corresponding path program 1 times [2021-11-20 06:27:04,829 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:27:04,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [310810093] [2021-11-20 06:27:04,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:27:04,829 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:27:04,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:27:05,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:27:05,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:27:05,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:27:05,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:27:05,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 06:27:05,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 06:27:05,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-20 06:27:05,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-20 06:27:05,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 06:27:05,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-11-20 06:27:05,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:05,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-11-20 06:27:05,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:05,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:05,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:27:05,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-11-20 06:27:05,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:05,273 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:27:05,273 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:27:05,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [310810093] [2021-11-20 06:27:05,273 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [310810093] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:27:05,273 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:27:05,274 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:27:05,274 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2029919160] [2021-11-20 06:27:05,274 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:27:05,275 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:27:05,275 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:27:05,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:27:05,275 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:27:05,276 INFO L87 Difference]: Start difference. First operand 7506 states and 11078 transitions. Second operand has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-20 06:27:07,593 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:27:09,622 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:27:21,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:27:21,577 INFO L93 Difference]: Finished difference Result 19819 states and 30163 transitions. [2021-11-20 06:27:21,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:27:21,581 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 178 [2021-11-20 06:27:21,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:27:21,636 INFO L225 Difference]: With dead ends: 19819 [2021-11-20 06:27:21,637 INFO L226 Difference]: Without dead ends: 12330 [2021-11-20 06:27:21,659 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:27:21,660 INFO L933 BasicCegarLoop]: 3601 mSDtfsCounter, 1679 mSDsluCounter, 6061 mSDsCounter, 0 mSdLazyCounter, 2505 mSolverCounterSat, 718 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1934 SdHoareTripleChecker+Valid, 9662 SdHoareTripleChecker+Invalid, 3225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 718 IncrementalHoareTripleChecker+Valid, 2505 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:27:21,661 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1934 Valid, 9662 Invalid, 3225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [718 Valid, 2505 Invalid, 2 Unknown, 0 Unchecked, 15.8s Time] [2021-11-20 06:27:21,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12330 states. [2021-11-20 06:27:22,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12330 to 7510. [2021-11-20 06:27:22,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7510 states, 5830 states have (on average 1.4128644939965695) internal successors, (8237), 5881 states have internal predecessors, (8237), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-11-20 06:27:22,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7510 states to 7510 states and 11082 transitions. [2021-11-20 06:27:22,206 INFO L78 Accepts]: Start accepts. Automaton has 7510 states and 11082 transitions. Word has length 178 [2021-11-20 06:27:22,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:27:22,207 INFO L470 AbstractCegarLoop]: Abstraction has 7510 states and 11082 transitions. [2021-11-20 06:27:22,207 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-20 06:27:22,207 INFO L276 IsEmpty]: Start isEmpty. Operand 7510 states and 11082 transitions. [2021-11-20 06:27:22,229 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2021-11-20 06:27:22,229 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:27:22,229 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:27:22,230 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 06:27:22,230 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:27:22,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:27:22,231 INFO L85 PathProgramCache]: Analyzing trace with hash -494582719, now seen corresponding path program 1 times [2021-11-20 06:27:22,231 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:27:22,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1366699238] [2021-11-20 06:27:22,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:27:22,232 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:27:22,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:27:22,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:27:22,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:27:22,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:27:22,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:27:22,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 06:27:22,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 06:27:22,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-20 06:27:22,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-20 06:27:22,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 06:27:22,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-11-20 06:27:22,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:22,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-11-20 06:27:22,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:22,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:22,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:27:22,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2021-11-20 06:27:22,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-11-20 06:27:22,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:22,925 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 134 trivial. 0 not checked. [2021-11-20 06:27:22,925 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:27:22,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1366699238] [2021-11-20 06:27:22,926 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1366699238] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:27:22,926 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:27:22,926 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:27:22,927 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1919925537] [2021-11-20 06:27:22,927 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:27:22,928 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:27:22,928 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:27:22,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:27:22,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:27:22,929 INFO L87 Difference]: Start difference. First operand 7510 states and 11082 transitions. Second operand has 7 states, 7 states have (on average 16.571428571428573) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-11-20 06:27:25,229 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:27:29,530 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:27:33,227 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:27:40,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:27:40,917 INFO L93 Difference]: Finished difference Result 23909 states and 36931 transitions. [2021-11-20 06:27:40,921 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:27:40,925 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 16.571428571428573) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2021-11-20 06:27:40,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:27:41,146 INFO L225 Difference]: With dead ends: 23909 [2021-11-20 06:27:41,146 INFO L226 Difference]: Without dead ends: 16416 [2021-11-20 06:27:41,169 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:27:41,173 INFO L933 BasicCegarLoop]: 4779 mSDtfsCounter, 3141 mSDsluCounter, 5984 mSDsCounter, 0 mSdLazyCounter, 1970 mSolverCounterSat, 1390 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3621 SdHoareTripleChecker+Valid, 10763 SdHoareTripleChecker+Invalid, 3363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1390 IncrementalHoareTripleChecker+Valid, 1970 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:27:41,173 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3621 Valid, 10763 Invalid, 3363 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1390 Valid, 1970 Invalid, 3 Unknown, 0 Unchecked, 17.3s Time] [2021-11-20 06:27:41,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16416 states. [2021-11-20 06:27:41,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16416 to 7518. [2021-11-20 06:27:41,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4122987324426173) internal successors, (8245), 5889 states have internal predecessors, (8245), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-11-20 06:27:41,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11090 transitions. [2021-11-20 06:27:41,973 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11090 transitions. Word has length 182 [2021-11-20 06:27:41,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:27:41,974 INFO L470 AbstractCegarLoop]: Abstraction has 7518 states and 11090 transitions. [2021-11-20 06:27:41,974 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 16.571428571428573) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-11-20 06:27:41,974 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11090 transitions. [2021-11-20 06:27:41,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2021-11-20 06:27:41,996 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:27:41,996 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:27:41,997 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 06:27:41,997 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:27:41,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:27:41,998 INFO L85 PathProgramCache]: Analyzing trace with hash -1968730126, now seen corresponding path program 1 times [2021-11-20 06:27:41,998 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:27:41,998 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [137189169] [2021-11-20 06:27:41,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:27:41,999 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:27:42,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:27:42,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:27:42,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:27:42,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:27:42,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:27:42,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 06:27:42,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 06:27:42,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-20 06:27:42,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-20 06:27:42,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 06:27:42,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-11-20 06:27:42,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:42,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-11-20 06:27:42,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:42,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:27:42,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:27:42,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-11-20 06:27:42,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-11-20 06:27:42,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:27:42,567 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:27:42,567 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:27:42,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [137189169] [2021-11-20 06:27:42,567 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [137189169] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:27:42,568 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:27:42,568 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-20 06:27:42,568 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [958709774] [2021-11-20 06:27:42,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:27:42,569 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-20 06:27:42,569 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:27:42,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-20 06:27:42,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:27:42,570 INFO L87 Difference]: Start difference. First operand 7518 states and 11090 transitions. Second operand has 9 states, 9 states have (on average 13.222222222222221) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 6 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:27:45,163 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:27:47,197 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:28:03,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:28:03,346 INFO L93 Difference]: Finished difference Result 20071 states and 30899 transitions. [2021-11-20 06:28:03,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 06:28:03,352 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 13.222222222222221) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 6 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 183 [2021-11-20 06:28:03,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:28:03,412 INFO L225 Difference]: With dead ends: 20071 [2021-11-20 06:28:03,412 INFO L226 Difference]: Without dead ends: 12570 [2021-11-20 06:28:03,444 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2021-11-20 06:28:03,445 INFO L933 BasicCegarLoop]: 3601 mSDtfsCounter, 2082 mSDsluCounter, 12739 mSDsCounter, 0 mSdLazyCounter, 3453 mSolverCounterSat, 1079 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2371 SdHoareTripleChecker+Valid, 16340 SdHoareTripleChecker+Invalid, 4534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1079 IncrementalHoareTripleChecker+Valid, 3453 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:28:03,445 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2371 Valid, 16340 Invalid, 4534 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1079 Valid, 3453 Invalid, 2 Unknown, 0 Unchecked, 20.1s Time] [2021-11-20 06:28:03,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12570 states. [2021-11-20 06:28:04,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12570 to 7518. [2021-11-20 06:28:04,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4116135662898253) internal successors, (8241), 5889 states have internal predecessors, (8241), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-11-20 06:28:04,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11086 transitions. [2021-11-20 06:28:04,232 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11086 transitions. Word has length 183 [2021-11-20 06:28:04,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:28:04,233 INFO L470 AbstractCegarLoop]: Abstraction has 7518 states and 11086 transitions. [2021-11-20 06:28:04,234 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 13.222222222222221) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 6 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:28:04,234 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11086 transitions. [2021-11-20 06:28:04,255 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-11-20 06:28:04,255 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:28:04,256 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:28:04,256 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-20 06:28:04,256 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:28:04,257 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:28:04,257 INFO L85 PathProgramCache]: Analyzing trace with hash -1261467869, now seen corresponding path program 1 times [2021-11-20 06:28:04,257 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:28:04,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539711667] [2021-11-20 06:28:04,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:28:04,258 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:28:07,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:28:07,310 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-20 06:28:09,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:28:09,483 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-20 06:28:09,483 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-20 06:28:09,484 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 06:28:09,489 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 06:28:09,493 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:28:09,498 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 06:28:09,636 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,637 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,638 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,638 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,639 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,640 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,640 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,641 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,641 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:09,641 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 06:28:10,085 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 06:28:10 BoogieIcfgContainer [2021-11-20 06:28:10,085 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 06:28:10,086 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 06:28:10,086 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 06:28:10,086 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 06:28:10,087 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:25:30" (3/4) ... [2021-11-20 06:28:10,091 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-20 06:28:10,091 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 06:28:10,092 INFO L158 Benchmark]: Toolchain (without parser) took 172130.14ms. Allocated memory was 102.8MB in the beginning and 897.6MB in the end (delta: 794.8MB). Free memory was 58.7MB in the beginning and 375.9MB in the end (delta: -317.2MB). Peak memory consumption was 480.7MB. Max. memory is 16.1GB. [2021-11-20 06:28:10,092 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 102.8MB. Free memory is still 72.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:28:10,093 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2803.24ms. Allocated memory was 102.8MB in the beginning and 172.0MB in the end (delta: 69.2MB). Free memory was 58.4MB in the beginning and 88.2MB in the end (delta: -29.8MB). Peak memory consumption was 87.1MB. Max. memory is 16.1GB. [2021-11-20 06:28:10,093 INFO L158 Benchmark]: Boogie Procedure Inliner took 362.40ms. Allocated memory is still 172.0MB. Free memory was 88.2MB in the beginning and 54.4MB in the end (delta: 33.8MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. [2021-11-20 06:28:10,094 INFO L158 Benchmark]: Boogie Preprocessor took 384.56ms. Allocated memory was 172.0MB in the beginning and 262.1MB in the end (delta: 90.2MB). Free memory was 54.4MB in the beginning and 141.4MB in the end (delta: -87.0MB). Peak memory consumption was 14.6MB. Max. memory is 16.1GB. [2021-11-20 06:28:10,094 INFO L158 Benchmark]: RCFGBuilder took 8958.82ms. Allocated memory was 262.1MB in the beginning and 499.1MB in the end (delta: 237.0MB). Free memory was 141.4MB in the beginning and 356.0MB in the end (delta: -214.6MB). Peak memory consumption was 173.4MB. Max. memory is 16.1GB. [2021-11-20 06:28:10,095 INFO L158 Benchmark]: TraceAbstraction took 159608.73ms. Allocated memory was 499.1MB in the beginning and 897.6MB in the end (delta: 398.5MB). Free memory was 356.0MB in the beginning and 376.7MB in the end (delta: -20.7MB). Peak memory consumption was 549.5MB. Max. memory is 16.1GB. [2021-11-20 06:28:10,095 INFO L158 Benchmark]: Witness Printer took 5.22ms. Allocated memory is still 897.6MB. Free memory was 376.7MB in the beginning and 375.9MB in the end (delta: 849.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:28:10,098 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 102.8MB. Free memory is still 72.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2803.24ms. Allocated memory was 102.8MB in the beginning and 172.0MB in the end (delta: 69.2MB). Free memory was 58.4MB in the beginning and 88.2MB in the end (delta: -29.8MB). Peak memory consumption was 87.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 362.40ms. Allocated memory is still 172.0MB. Free memory was 88.2MB in the beginning and 54.4MB in the end (delta: 33.8MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 384.56ms. Allocated memory was 172.0MB in the beginning and 262.1MB in the end (delta: 90.2MB). Free memory was 54.4MB in the beginning and 141.4MB in the end (delta: -87.0MB). Peak memory consumption was 14.6MB. Max. memory is 16.1GB. * RCFGBuilder took 8958.82ms. Allocated memory was 262.1MB in the beginning and 499.1MB in the end (delta: 237.0MB). Free memory was 141.4MB in the beginning and 356.0MB in the end (delta: -214.6MB). Peak memory consumption was 173.4MB. Max. memory is 16.1GB. * TraceAbstraction took 159608.73ms. Allocated memory was 499.1MB in the beginning and 897.6MB in the end (delta: 398.5MB). Free memory was 356.0MB in the beginning and 376.7MB in the end (delta: -20.7MB). Peak memory consumption was 549.5MB. Max. memory is 16.1GB. * Witness Printer took 5.22ms. Allocated memory is still 897.6MB. Free memory was 376.7MB in the beginning and 375.9MB in the end (delta: 849.6kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7474]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 10722, overapproximation of bitwiseAnd at line 9945. Possible FailurePath: [L7497] int ldv_irq_1_3 = 0; [L7498] void *ldv_irq_data_1_1 ; [L7499] int ldv_irq_1_0 = 0; [L7500] void *ldv_irq_data_1_0 ; [L7501] int ldv_state_variable_0 ; [L7502] int ldv_state_variable_2 ; [L7503] void *ldv_irq_data_1_3 ; [L7504] struct sk_buff *pcie_ops_group1 ; [L7505] struct device *mwifiex_pcie_pm_ops_group1 ; [L7506] void *ldv_irq_data_1_2 ; [L7507] struct mwifiex_adapter *pcie_ops_group0 ; [L7508] int ldv_irq_1_2 = 0; [L7509] int LDV_IN_INTERRUPT = 1; [L7510] int ldv_irq_1_1 = 0; [L7511] int ldv_irq_line_1_3 ; [L7512] int ldv_state_variable_3 ; [L7513] int ldv_irq_line_1_0 ; [L7514] int ref_cnt ; [L7515] int ldv_irq_line_1_1 ; [L7516] int ldv_state_variable_1 ; [L7517] int ldv_irq_line_1_2 ; [L7518] int ldv_state_variable_4 ; [L7519] struct pci_dev *mwifiex_pcie_group0 ; [L7687-L7689] static struct mwifiex_pcie_card_reg const mwifiex_reg_8766 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 3288U, 3292U, 3296U, 3300U, 3304U, 3308U, 3312U, 0U, 63U, 0U, 63U, 0U, 128U, 128U, 128U, 0U, 0U, 0U, 0U, 0U, 0U, 1U}; [L7690-L7693] static struct mwifiex_pcie_card_reg const mwifiex_reg_8897 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 49292U, 49244U, 49244U, 49292U, 3304U, 3308U, 3312U, 16U, 67043328U, 134152192U, 1023U, 2047U, 67108864U, 1024U, 128U, 1U, 2U, 4U, 8U, 65536U, 1U, 0U}; [L7694] static struct mwifiex_pcie_device const mwifiex_pcie8766 = {"mrvl/pcie8766_uapsta.bin", & mwifiex_reg_8766, 256U, 2048U}; [L7695] static struct mwifiex_pcie_device const mwifiex_pcie8897 = {"mrvl/pcie8897_uapsta.bin", & mwifiex_reg_8897, 256U, 4096U}; [L7779] static u8 user_rmmod ; [L7781] static struct semaphore add_remove_card_sem ; [L8010-L8012] static struct pci_device_id const mwifiex_ids[3U] = { {4523U, 11056U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8766)}, {4523U, 11064U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8897)}}; [L8013] struct pci_device_id const __mod_pci__mwifiex_ids_device_table ; [L8014-L8017] static struct dev_pm_ops const mwifiex_pcie_pm_ops = {0, 0, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L8018-L8034] static struct pci_driver mwifiex_pcie = {{0, 0}, "mwifiex_pcie", (struct pci_device_id const *)(& mwifiex_ids), & mwifiex_pcie_probe, & mwifiex_pcie_remove, 0, 0, 0, 0, & mwifiex_pcie_shutdown, 0, 0, {0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_pcie_pm_ops, 0}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}; [L10694-L10700] static struct mwifiex_if_ops pcie_ops = {& mwifiex_pcie_init, & mwifiex_pcie_cleanup, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_pcie_enable_host_int, 0, & mwifiex_process_int_status, & mwifiex_pcie_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, (void (*)(struct mwifiex_adapter * , u16 ))0, (void (*)(struct mwifiex_adapter * ))0, & mwifiex_pcie_cmdrsp_complete, & mwifiex_pcie_event_complete, 0, & mwifiex_pcie_init_fw_port, 0, 0, 0, & mwifiex_clean_pcie_ring_buf}; [L10755] int ldv_retval_20 ; [L10757] int ldv_retval_18 ; [L10758] int ldv_retval_2 ; [L10759] int ldv_retval_5 ; [L10760] int ldv_retval_0 ; [L10762] int ldv_retval_11 ; [L10763] int ldv_retval_1 ; [L10765] int ldv_retval_15 ; [L10766] int ldv_retval_16 ; [L10771] int ldv_retval_8 ; [L10772] int ldv_retval_7 ; [L10773] int ldv_retval_19 ; [L10775] int ldv_retval_14 ; [L10776] int ldv_retval_17 ; [L10779] int ldv_retval_12 ; [L10781] int ldv_retval_6 ; [L10784] int ldv_retval_13 ; [L10785] int ldv_retval_9 ; [L10786] int ldv_retval_10 ; [L10788] int ldv_retval_4 ; [L10790] int ldv_retval_3 ; [L11484] Element set_impl[15] ; [L11485] int last_index = 0; [L11619] Set LDV_SKBS ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10945] struct pci_device_id *ldvarg0 ; [L10946] void *tmp ; [L10947] struct mwifiex_tx_param *ldvarg1 ; [L10948] void *tmp___0 ; [L10949] u32 ldvarg4 ; [L10950] u32 tmp___1 ; [L10951] struct mwifiex_fw_image *ldvarg3 ; [L10952] void *tmp___2 ; [L10953] u8 ldvarg2 ; [L10954] u8 tmp___3 ; [L10955] int tmp___4 ; [L10956] int tmp___5 ; [L10957] int tmp___6 ; [L10958] int tmp___7 ; [L10959] int tmp___8 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, user_rmmod=0] [L10961] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] tmp = ldv_zalloc(32UL) [L10962] ldvarg0 = (struct pci_device_id *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=4, tmp___0=1, user_rmmod=0] [L10963] RET, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] tmp___0 = ldv_zalloc(4UL) [L10964] ldvarg1 = (struct mwifiex_tx_param *)tmp___0 [L10965] tmp___1 = __VERIFIER_nondet_u32() [L10966] ldvarg4 = tmp___1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, user_rmmod=0] [L10967] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, user_rmmod=0] [L10967] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, user_rmmod=0] [L10967] tmp___2 = ldv_zalloc(32UL) [L10968] ldvarg3 = (struct mwifiex_fw_image *)tmp___2 [L10969] tmp___3 = __VERIFIER_nondet_u8() [L10970] ldvarg2 = tmp___3 [L10971] CALL ldv_initialize() [L11638] CALL ldv_set_init(LDV_SKBS) [L11490] set = set_impl [L11491] last_index = 0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={370:0}, set_impl={370:0}, user_rmmod=0] [L11638] RET ldv_set_init(LDV_SKBS) [L10971] RET ldv_initialize() [L10972] ldv_state_variable_4 = 0 [L10973] ldv_state_variable_1 = 1 [L10974] ref_cnt = 0 [L10975] ldv_state_variable_0 = 1 [L10976] ldv_state_variable_3 = 0 [L10977] ldv_state_variable_2 = 0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: [L11209] case 1: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=1, user_rmmod=0] [L11210] COND TRUE ldv_state_variable_0 == 1 [L11211] CALL, EXPR mwifiex_pcie_init_module() [L10703] int ret ; [L10704] struct _ddebug descriptor ; [L10705] long tmp ; [L10706] struct _ddebug descriptor___0 ; [L10707] long tmp___0 ; [L10709] descriptor.modname = "mwifiex_pcie" [L10710] descriptor.function = "mwifiex_pcie_init_module" [L10711] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10712] descriptor.format = "Marvell PCIe Driver\n" [L10713] descriptor.lineno = 2464U [L10714] descriptor.flags = 0U [L10715] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor.flags=0, descriptor___0={377:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); VAL [\old(c)=0, \old(exp)=-2, \result=-2, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, c=0, exp=-2, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor.flags=0, descriptor___0={377:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L10716] COND TRUE tmp != 0L [L10720] CALL sema_init(& add_remove_card_sem, 1) [L7532] struct lock_class_key __key ; [L7533] struct semaphore __constr_expr_0 ; [L7535] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7536] __constr_expr_0.lock.magic = 3735899821U [L7537] __constr_expr_0.lock.owner_cpu = 4294967295U [L7538] __constr_expr_0.lock.owner = (void *)-1 [L7539] __constr_expr_0.lock.dep_map.key = 0 [L7540] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7541] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7542] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7543] __constr_expr_0.lock.dep_map.cpu = 0 [L7544] __constr_expr_0.lock.dep_map.ip = 0UL [L7545] __constr_expr_0.count = (unsigned int )val [L7546] __constr_expr_0.wait_list.next = & sem->wait_list [L7547] __constr_expr_0.wait_list.prev = & sem->wait_list [L7548] *sem = __constr_expr_0 [L7549] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7550] return; [L7550] return; VAL [\old(val)=1, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, sem={365:0}, sem={365:0}, set_impl={370:0}, user_rmmod=0, val=1] [L10720] RET sema_init(& add_remove_card_sem, 1) [L10721] user_rmmod = 0U [L10722] CALL, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L11712] return __VERIFIER_nondet_int(); [L10722] RET, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10722] ret = __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10723] COND FALSE !(ret != 0) [L10726] descriptor___0.modname = "mwifiex_pcie" [L10727] descriptor___0.function = "mwifiex_pcie_init_module" [L10728] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10729] descriptor___0.format = "info: Driver registered successfully!\n" [L10730] descriptor___0.lineno = 2475U [L10731] descriptor___0.flags = 0U [L10732] EXPR descriptor___0.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor___0={377:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=-2, user_rmmod=0] [L10732] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); VAL [\old(c)=0, \old(exp)=-3, \result=-3, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, c=0, exp=-3, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10732] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor___0={377:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=-2, user_rmmod=0] [L10732] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L10733] COND TRUE tmp___0 != 0L [L10738] return (ret); [L10738] return (ret); [L10738] return (ret); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=-2, tmp___0=-3, user_rmmod=0] [L11211] RET, EXPR mwifiex_pcie_init_module() [L11211] ldv_retval_19 = mwifiex_pcie_init_module() [L11212] COND FALSE !(ldv_retval_19 != 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=1, user_rmmod=0] [L11217] COND TRUE ldv_retval_19 == 0 [L11218] ldv_state_variable_0 = 2 [L11219] ldv_state_variable_2 = 1 [L11220] CALL ldv_initialize_mwifiex_if_ops_2() [L10899] void *tmp ; [L10900] void *tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=6864, tmp___0=1, user_rmmod=0] [L10902] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] tmp = ldv_zalloc(6864UL) [L10903] pcie_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=232, tmp___0=1, user_rmmod=0] [L10904] RET, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] tmp___0 = ldv_zalloc(232UL) [L10905] pcie_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, user_rmmod=0] [L11220] RET ldv_initialize_mwifiex_if_ops_2() [L11221] ldv_state_variable_3 = 1 [L11222] CALL ldv_initialize_pci_driver_3() [L10890] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] CALL, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=2976, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=2976, tmp___0=1, user_rmmod=0] [L10892] RET, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(2976UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] tmp = ldv_zalloc(2976UL) [L10893] mwifiex_pcie_group0 = (struct pci_dev *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L11222] RET ldv_initialize_pci_driver_3() [L11223] ldv_state_variable_4 = 1 [L11224] CALL ldv_dev_pm_ops_4() [L10911] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=1416, tmp___0=1, user_rmmod=0] [L10913] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] tmp = ldv_zalloc(1416UL) [L10914] mwifiex_pcie_pm_ops_group1 = (struct device *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L11224] RET ldv_dev_pm_ops_4() [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11237] case 3: [L11280] case 4: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=4, tmp___6=1, user_rmmod=0] [L11281] COND TRUE ldv_state_variable_2 != 0 [L11282] tmp___8 = __VERIFIER_nondet_int() [L11284] case 0: [L11291] case 1: [L11298] case 2: [L11305] case 3: [L11312] case 4: [L11319] case 5: [L11326] case 6: [L11333] case 7: [L11340] case 8: [L11347] case 9: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L11348] COND TRUE ldv_state_variable_2 == 1 [L11349] CALL mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L9904] int ret ; [L9905] u8 *firmware ; [L9906] u32 firmware_len ; [L9907] u32 offset ; [L9908] struct sk_buff *skb ; [L9909] u32 txlen ; [L9910] u32 tx_blocks ; [L9911] u32 tries ; [L9912] u32 len ; [L9913] u32 block_retry_cnt ; [L9914] struct pcie_service_card *card ; [L9915] struct mwifiex_pcie_card_reg const *reg ; [L9916] struct _ddebug descriptor ; [L9917] long tmp ; [L9918] int tmp___0 ; [L9919] u32 ireg_intr ; [L9920] struct _ddebug descriptor___0 ; [L9921] long tmp___1 ; [L9922] int tmp___2 ; [L9923] int tmp___3 ; [L9924] struct _ddebug descriptor___1 ; [L9925] long tmp___4 ; [L9927] EXPR fw->fw_buf [L9927] firmware = fw->fw_buf [L9928] EXPR fw->fw_len [L9928] firmware_len = fw->fw_len [L9929] offset = 0U [L9930] tx_blocks = 0U [L9931] block_retry_cnt = 0U [L9932] EXPR adapter->card [L9932] card = (struct pcie_service_card *)adapter->card [L9933] EXPR card->pcie.reg [L9933] reg = card->pcie.reg [L9934] COND FALSE !((unsigned long )firmware == (unsigned long )((u8 *)0U) || firmware_len == 0U) [L9939] descriptor.modname = "mwifiex_pcie" [L9940] descriptor.function = "mwifiex_prog_fw_w_helper" [L9941] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L9942] descriptor.format = "info: Downloading FW image (%d bytes)\n" [L9943] descriptor.lineno = 1857U [L9944] descriptor.flags = 0U [L9945] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor.flags=0, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); VAL [\old(c)=0, \old(exp)=-5, \result=-5, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, c=0, exp=-5, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L9945] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor.flags=0, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-5, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L9946] COND TRUE tmp != 0L [L9947] adapter->dev VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tx_blocks=0, user_rmmod=0] [L9951] CALL, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8209] int tmp ; [L8210] bool tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] CALL, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7823] u32 *cookie_addr ; [L7824] struct pcie_service_card *card ; [L7825] struct mwifiex_pcie_card_reg const *reg ; [L7826] struct _ddebug descriptor ; [L7827] long tmp ; [L7829] EXPR adapter->card [L7829] card = (struct pcie_service_card *)adapter->card [L7830] EXPR card->pcie.reg [L7830] reg = card->pcie.reg [L7831] EXPR reg->sleep_cookie VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, descriptor={381:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, reg->sleep_cookie=-255, set_impl={370:0}, user_rmmod=0] [L7831] COND FALSE !((unsigned int )((unsigned char )reg->sleep_cookie) == 0U) [L7835] EXPR card->sleep_cookie_vbase VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, card->sleep_cookie_vbase={0:0}, descriptor={381:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, user_rmmod=0] [L7835] COND FALSE !((unsigned long )card->sleep_cookie_vbase != (unsigned long )((u8 *)0U)) [L7855] return (0); [L7855] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, user_rmmod=0] [L8212] RET, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_ok_to_access_hw(adapter)=0, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] tmp___0 = mwifiex_pcie_ok_to_access_hw(adapter) [L8213] COND FALSE !((int )tmp___0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L8222] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L9951] RET, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_disable_host_int(adapter)=0, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tx_blocks=0, user_rmmod=0] [L9951] tmp___0 = mwifiex_pcie_disable_host_int(adapter) [L9952] COND FALSE !(tmp___0 != 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] CALL, EXPR ldv_dev_alloc_skb_14(2312U) VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11450] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11622] void *skb ; [L11623] void *tmp___7 ; VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND FALSE !(tmp___0 != 0) [L7447] EXPR, FCALL calloc(1UL, size) [L7447] tmp = calloc(1UL, size) [L7448] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551615:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L7449] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7418] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7449] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551615:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L7450] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551615:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551615:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L11625] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551615:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L11626] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, user_rmmod=0] [L11627] COND FALSE !(! skb) [L11630] CALL ldv_set_add(LDV_SKBS, skb) [L11498] int i ; [L11500] i = 0 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11501] COND TRUE 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11502] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11512] COND TRUE last_index < 15 [L11513] set_impl[last_index] = e [L11514] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11630] RET ldv_set_add(LDV_SKBS, skb) [L11631] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551615:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, user_rmmod=0] [L11452] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_skb_alloc()={-18446744073709551615:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] tmp = ldv_skb_alloc() [L11453] return (tmp); VAL [\old(last_index)=0, \old(length)=2312, \result={-18446744073709551615:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={-18446744073709551615:0}, user_rmmod=0] [L9958] RET, EXPR ldv_dev_alloc_skb_14(2312U) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, ldv_dev_alloc_skb_14(2312U)={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] skb = ldv_dev_alloc_skb_14(2312U) [L9959] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9965] ireg_intr = 0U VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9966] COND FALSE !(offset >= firmware_len) [L9970] tries = 0U VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9986] COND TRUE tries <= 99U VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] EXPR reg->cmd_size VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, reg->cmd_size=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] CALL, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8046] struct pcie_service_card *card ; [L8048] EXPR adapter->card [L8048] card = (struct pcie_service_card *)adapter->card [L8049] EXPR card->pci_mmap1 [L8049] CALL, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L11765] return __VERIFIER_nondet_uint(); [L8049] RET, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L8049] *data = ioread32(card->pci_mmap1 + (unsigned long )reg) [L8050] return (0); VAL [\old(reg)=0, \result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, data={374:0}, data={374:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg=0, set_impl={370:0}, user_rmmod=0] [L9973] RET, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_read_reg(adapter, (int )reg->cmd_size, & len)=0, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, reg->cmd_size=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] ret = mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) [L9974] COND FALSE !(ret != 0) [L9979] EXPR \read(len) VAL [\read(len)=-4294964983, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9979] COND TRUE len != 0U [L9991] EXPR \read(len) VAL [\read(len)=-4294964983, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9991] COND FALSE !(len == 0U) [L9994] EXPR \read(len) VAL [\read(len)=-4294964983, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9994] COND TRUE len > 2312U [L9996] \read(len) [L9997] ret = -1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=-1, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10076] CALL dev_kfree_skb_any(skb) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7578] FCALL __dev_kfree_skb_any(skb, 1) [L10076] RET dev_kfree_skb_any(skb) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=-1, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); VAL [\result=-1, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=-1, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L11349] RET mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L11350] ldv_state_variable_2 = 1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=1, tmp___8=9, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=0] [L11202] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L11203] CALL mwifiex_pcie_cleanup_module() [L10743] int tmp ; [L10745] CALL, EXPR down_interruptible(& add_remove_card_sem) [L11758] return __VERIFIER_nondet_int(); [L10745] RET, EXPR down_interruptible(& add_remove_card_sem) [L10745] tmp = down_interruptible(& add_remove_card_sem) [L10746] COND FALSE !(tmp == 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp=1, user_rmmod=0] [L10750] user_rmmod = 1U [L10751] FCALL pci_unregister_driver(& mwifiex_pcie) [L11203] RET mwifiex_pcie_cleanup_module() [L11204] ldv_state_variable_0 = 3 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=1] [L11402] CALL ldv_check_final_state() [L11689] int tmp___7 ; [L11691] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L11580] return (last_index == 0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=1] [L11691] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L11691] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L11692] COND FALSE !(\read(tmp___7)) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___7=0, user_rmmod=1] [L11694] CALL ldv_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] [L7474] reach_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 58 procedures, 1563 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 159.0s, OverallIterations: 11, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.2s, AutomataDifference: 138.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 17 mSolverCounterUnknown, 21809 SdHoareTripleChecker+Valid, 132.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 19859 mSDsluCounter, 143304 SdHoareTripleChecker+Invalid, 121.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 111712 mSDsCounter, 8806 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 27526 IncrementalHoareTripleChecker+Invalid, 36349 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 8806 mSolverCounterUnsat, 31592 mSDtfsCounter, 27526 mSolverCounterSat, 0.5s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 351 GetRequests, 272 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 83 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=7518occurred in iteration=9, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.0s AutomataMinimizationTime, 10 MinimizatonAttempts, 26546 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 7.5s SatisfiabilityAnalysisTime, 4.5s InterpolantComputationTime, 1594 NumberOfCodeBlocks, 1594 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 1397 ConstructedInterpolants, 0 QuantifiedInterpolants, 3064 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 10 InterpolantComputations, 10 PerfectInterpolantSequences, 991/991 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-20 06:28:10,326 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-11-20 06:28:10,351 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:28:13,069 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:28:13,071 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:28:13,119 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:28:13,120 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:28:13,126 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:28:13,128 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:28:13,140 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:28:13,144 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:28:13,148 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:28:13,150 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:28:13,153 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:28:13,154 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:28:13,161 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:28:13,163 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:28:13,166 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:28:13,171 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:28:13,172 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:28:13,174 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:28:13,177 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:28:13,182 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:28:13,190 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:28:13,194 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:28:13,197 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:28:13,206 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:28:13,207 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:28:13,207 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:28:13,210 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:28:13,211 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:28:13,212 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:28:13,214 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:28:13,215 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:28:13,218 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:28:13,219 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:28:13,221 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:28:13,222 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:28:13,223 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:28:13,223 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:28:13,224 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:28:13,226 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:28:13,227 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:28:13,234 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-20 06:28:13,279 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:28:13,279 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:28:13,280 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:28:13,280 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:28:13,281 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:28:13,281 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:28:13,282 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:28:13,283 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:28:13,283 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:28:13,283 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:28:13,284 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:28:13,284 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:28:13,284 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:28:13,285 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:28:13,285 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-11-20 06:28:13,285 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-20 06:28:13,285 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-20 06:28:13,286 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:28:13,286 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:28:13,286 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:28:13,287 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:28:13,287 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:28:13,287 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:28:13,287 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:28:13,288 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:28:13,288 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:28:13,288 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:28:13,289 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-20 06:28:13,289 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-20 06:28:13,289 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:28:13,290 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:28:13,290 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:28:13,290 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:28:13,291 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-20 06:28:13,291 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2021-11-20 06:28:13,734 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:28:13,771 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:28:13,776 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:28:13,777 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:28:13,781 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:28:13,783 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-11-20 06:28:13,868 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/a48f6460b/056ea7de9f63456789ce48c82ca69216/FLAG6491118c1 [2021-11-20 06:28:15,121 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:28:15,122 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-11-20 06:28:15,204 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/a48f6460b/056ea7de9f63456789ce48c82ca69216/FLAG6491118c1 [2021-11-20 06:28:15,351 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/data/a48f6460b/056ea7de9f63456789ce48c82ca69216 [2021-11-20 06:28:15,354 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:28:15,356 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:28:15,357 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:28:15,358 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:28:15,361 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:28:15,362 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:28:15" (1/1) ... [2021-11-20 06:28:15,364 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6f557c3f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:15, skipping insertion in model container [2021-11-20 06:28:15,364 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:28:15" (1/1) ... [2021-11-20 06:28:15,375 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:28:15,561 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:28:17,255 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-11-20 06:28:18,790 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:28:18,847 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-11-20 06:28:18,907 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:28:19,216 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-11-20 06:28:19,574 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:28:19,608 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:28:19,872 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-11-20 06:28:20,186 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:28:20,535 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:28:20,536 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20 WrapperNode [2021-11-20 06:28:20,536 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:28:20,538 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:28:20,538 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:28:20,539 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:28:20,548 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:20,747 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,049 INFO L137 Inliner]: procedures = 262, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6145 [2021-11-20 06:28:21,050 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:28:21,050 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:28:21,051 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:28:21,051 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:28:21,061 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,062 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,173 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,174 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,435 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,487 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,523 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,562 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:28:21,564 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:28:21,565 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:28:21,566 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:28:21,567 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (1/1) ... [2021-11-20 06:28:21,576 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:28:21,590 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:28:21,607 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:28:21,625 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:28:21,666 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-20 06:28:21,667 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-20 06:28:21,667 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-20 06:28:21,667 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2021-11-20 06:28:21,667 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2021-11-20 06:28:21,668 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-20 06:28:21,668 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-20 06:28:21,668 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 06:28:21,668 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-20 06:28:21,668 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 06:28:21,669 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 06:28:21,669 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 06:28:21,669 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-20 06:28:21,670 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-20 06:28:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-11-20 06:28:21,670 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-11-20 06:28:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 06:28:21,670 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 06:28:21,671 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2021-11-20 06:28:21,671 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2021-11-20 06:28:21,671 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-20 06:28:21,671 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-20 06:28:21,671 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-20 06:28:21,672 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-20 06:28:21,672 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-11-20 06:28:21,672 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-11-20 06:28:21,672 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-11-20 06:28:21,672 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-11-20 06:28:21,673 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2021-11-20 06:28:21,673 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2021-11-20 06:28:21,673 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-11-20 06:28:21,673 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-11-20 06:28:21,674 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 06:28:21,674 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 06:28:21,675 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2021-11-20 06:28:21,675 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2021-11-20 06:28:21,675 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 06:28:21,675 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 06:28:21,676 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 06:28:21,676 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 06:28:21,676 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2021-11-20 06:28:21,676 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2021-11-20 06:28:21,676 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-11-20 06:28:21,677 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-11-20 06:28:21,677 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2021-11-20 06:28:21,677 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2021-11-20 06:28:21,678 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 06:28:21,678 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 06:28:21,679 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2021-11-20 06:28:21,679 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2021-11-20 06:28:21,680 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-11-20 06:28:21,681 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-11-20 06:28:21,681 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-11-20 06:28:21,681 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2021-11-20 06:28:21,681 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2021-11-20 06:28:21,681 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-20 06:28:21,682 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-20 06:28:21,682 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-20 06:28:21,682 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 06:28:21,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-20 06:28:21,683 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 06:28:21,684 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2021-11-20 06:28:21,684 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2021-11-20 06:28:21,684 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2021-11-20 06:28:21,684 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2021-11-20 06:28:21,684 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-20 06:28:21,685 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-20 06:28:21,685 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-20 06:28:21,685 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-20 06:28:21,686 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2021-11-20 06:28:21,686 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2021-11-20 06:28:21,686 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-11-20 06:28:21,687 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-11-20 06:28:21,687 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2021-11-20 06:28:21,687 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2021-11-20 06:28:21,688 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-20 06:28:21,688 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-20 06:28:21,688 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2021-11-20 06:28:21,688 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2021-11-20 06:28:21,688 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2021-11-20 06:28:21,688 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2021-11-20 06:28:21,689 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2021-11-20 06:28:21,689 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2021-11-20 06:28:21,690 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2021-11-20 06:28:21,690 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2021-11-20 06:28:21,690 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2021-11-20 06:28:21,691 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2021-11-20 06:28:21,691 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 06:28:21,691 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 06:28:21,692 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2021-11-20 06:28:21,692 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2021-11-20 06:28:21,693 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2021-11-20 06:28:21,693 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2021-11-20 06:28:21,694 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2021-11-20 06:28:21,694 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2021-11-20 06:28:21,694 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-11-20 06:28:21,694 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-11-20 06:28:21,695 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2021-11-20 06:28:21,695 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2021-11-20 06:28:21,695 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 06:28:21,695 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 06:28:21,695 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2021-11-20 06:28:21,695 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2021-11-20 06:28:21,696 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2021-11-20 06:28:21,696 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2021-11-20 06:28:21,696 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2021-11-20 06:28:21,697 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2021-11-20 06:28:21,697 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-11-20 06:28:21,697 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-11-20 06:28:21,697 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2021-11-20 06:28:21,698 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2021-11-20 06:28:21,699 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-20 06:28:21,702 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-20 06:28:21,702 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-20 06:28:21,702 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-20 06:28:21,702 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 06:28:21,703 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 06:28:21,705 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 06:28:21,705 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-20 06:28:21,706 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-20 06:28:21,706 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2021-11-20 06:28:21,712 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2021-11-20 06:28:21,712 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:28:21,713 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2021-11-20 06:28:21,713 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2021-11-20 06:28:21,713 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2021-11-20 06:28:21,713 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2021-11-20 06:28:21,713 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 06:28:21,714 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-20 06:28:21,714 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-20 06:28:21,714 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-11-20 06:28:21,714 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-11-20 06:28:21,714 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-20 06:28:21,714 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2021-11-20 06:28:21,715 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2021-11-20 06:28:21,715 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2021-11-20 06:28:21,715 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2021-11-20 06:28:21,715 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-11-20 06:28:21,715 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-11-20 06:28:21,716 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-20 06:28:21,716 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-20 06:28:21,716 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:28:21,716 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:28:21,716 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2021-11-20 06:28:21,716 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2021-11-20 06:28:21,717 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2021-11-20 06:28:21,717 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2021-11-20 06:28:22,790 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:28:22,793 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:28:32,771 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 06:29:25,764 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:29:25,790 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:29:25,797 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 06:29:25,802 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:29:25 BoogieIcfgContainer [2021-11-20 06:29:25,804 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:29:25,808 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:29:25,808 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:29:25,811 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:29:25,811 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:28:15" (1/3) ... [2021-11-20 06:29:25,812 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@e0375cf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:29:25, skipping insertion in model container [2021-11-20 06:29:25,812 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:28:20" (2/3) ... [2021-11-20 06:29:25,813 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@e0375cf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:29:25, skipping insertion in model container [2021-11-20 06:29:25,813 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:29:25" (3/3) ... [2021-11-20 06:29:25,814 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-11-20 06:29:25,820 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:29:25,820 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:29:25,903 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:29:25,914 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:29:25,914 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:29:25,992 INFO L276 IsEmpty]: Start isEmpty. Operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2021-11-20 06:29:26,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-11-20 06:29:26,017 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:29:26,017 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:29:26,018 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:29:26,021 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:29:26,022 INFO L85 PathProgramCache]: Analyzing trace with hash -1790507018, now seen corresponding path program 1 times [2021-11-20 06:29:26,041 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:29:26,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1443164875] [2021-11-20 06:29:26,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:29:26,042 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:29:26,043 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:29:26,046 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:29:26,053 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-20 06:29:27,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:29:27,391 INFO L263 TraceCheckSpWp]: Trace formula consists of 1374 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:29:27,398 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:29:27,680 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:29:27,680 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:29:28,061 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:29:28,062 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:29:28,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1443164875] [2021-11-20 06:29:28,063 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1443164875] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:29:28,064 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:29:28,064 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:29:28,066 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935523552] [2021-11-20 06:29:28,067 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:29:28,072 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:29:28,074 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:29:28,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:29:28,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:29:28,119 INFO L87 Difference]: Start difference. First operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 06:29:34,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:29:34,634 INFO L93 Difference]: Finished difference Result 6135 states and 9149 transitions. [2021-11-20 06:29:34,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:29:34,637 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2021-11-20 06:29:34,638 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:29:34,710 INFO L225 Difference]: With dead ends: 6135 [2021-11-20 06:29:34,711 INFO L226 Difference]: Without dead ends: 4539 [2021-11-20 06:29:34,731 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 74 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:29:34,737 INFO L933 BasicCegarLoop]: 2900 mSDtfsCounter, 4484 mSDsluCounter, 6067 mSDsCounter, 0 mSdLazyCounter, 633 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4484 SdHoareTripleChecker+Valid, 8967 SdHoareTripleChecker+Invalid, 640 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 633 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:29:34,738 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4484 Valid, 8967 Invalid, 640 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [7 Valid, 633 Invalid, 0 Unknown, 0 Unchecked, 6.0s Time] [2021-11-20 06:29:34,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4539 states. [2021-11-20 06:29:35,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4539 to 4539. [2021-11-20 06:29:35,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4539 states, 3469 states have (on average 1.4070337272989335) internal successors, (4881), 3505 states have internal predecessors, (4881), 904 states have call successors, (904), 166 states have call predecessors, (904), 165 states have return successors, (903), 903 states have call predecessors, (903), 903 states have call successors, (903) [2021-11-20 06:29:35,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4539 states to 4539 states and 6688 transitions. [2021-11-20 06:29:35,155 INFO L78 Accepts]: Start accepts. Automaton has 4539 states and 6688 transitions. Word has length 39 [2021-11-20 06:29:35,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:29:35,156 INFO L470 AbstractCegarLoop]: Abstraction has 4539 states and 6688 transitions. [2021-11-20 06:29:35,157 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 06:29:35,157 INFO L276 IsEmpty]: Start isEmpty. Operand 4539 states and 6688 transitions. [2021-11-20 06:29:35,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-11-20 06:29:35,163 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:29:35,163 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:29:35,201 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-20 06:29:35,378 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:29:35,378 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:29:35,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:29:35,379 INFO L85 PathProgramCache]: Analyzing trace with hash 1277499630, now seen corresponding path program 1 times [2021-11-20 06:29:35,382 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:29:35,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1716660128] [2021-11-20 06:29:35,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:29:35,383 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:29:35,383 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:29:35,384 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:29:35,421 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-20 06:29:36,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:29:36,907 INFO L263 TraceCheckSpWp]: Trace formula consists of 1488 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 06:29:36,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:29:37,354 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:29:37,354 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:29:38,120 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:29:38,121 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:29:38,121 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1716660128] [2021-11-20 06:29:38,121 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1716660128] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:29:38,121 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:29:38,122 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-20 06:29:38,122 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [874727831] [2021-11-20 06:29:38,122 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:29:38,124 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:29:38,124 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:29:38,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:29:38,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:29:38,125 INFO L87 Difference]: Start difference. First operand 4539 states and 6688 transitions. Second operand has 8 states, 6 states have (on average 6.166666666666667) internal successors, (37), 7 states have internal predecessors, (37), 4 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-20 06:29:39,744 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.10s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:29:44,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:29:44,074 INFO L93 Difference]: Finished difference Result 9986 states and 14825 transitions. [2021-11-20 06:29:44,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:29:44,075 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 6.166666666666667) internal successors, (37), 7 states have internal predecessors, (37), 4 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 49 [2021-11-20 06:29:44,076 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:29:44,125 INFO L225 Difference]: With dead ends: 9986 [2021-11-20 06:29:44,125 INFO L226 Difference]: Without dead ends: 5457 [2021-11-20 06:29:44,148 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:29:44,149 INFO L933 BasicCegarLoop]: 3462 mSDtfsCounter, 1089 mSDsluCounter, 16095 mSDsCounter, 0 mSdLazyCounter, 458 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1299 SdHoareTripleChecker+Valid, 19557 SdHoareTripleChecker+Invalid, 620 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 458 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 162 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:29:44,149 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1299 Valid, 19557 Invalid, 620 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [0 Valid, 458 Invalid, 0 Unknown, 162 Unchecked, 5.4s Time] [2021-11-20 06:29:44,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5457 states. [2021-11-20 06:29:44,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5457 to 4539. [2021-11-20 06:29:44,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4539 states, 3469 states have (on average 1.406745459786682) internal successors, (4880), 3505 states have internal predecessors, (4880), 904 states have call successors, (904), 166 states have call predecessors, (904), 165 states have return successors, (903), 903 states have call predecessors, (903), 903 states have call successors, (903) [2021-11-20 06:29:44,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4539 states to 4539 states and 6687 transitions. [2021-11-20 06:29:44,422 INFO L78 Accepts]: Start accepts. Automaton has 4539 states and 6687 transitions. Word has length 49 [2021-11-20 06:29:44,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:29:44,423 INFO L470 AbstractCegarLoop]: Abstraction has 4539 states and 6687 transitions. [2021-11-20 06:29:44,423 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 6.166666666666667) internal successors, (37), 7 states have internal predecessors, (37), 4 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-20 06:29:44,423 INFO L276 IsEmpty]: Start isEmpty. Operand 4539 states and 6687 transitions. [2021-11-20 06:29:44,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-11-20 06:29:44,429 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:29:44,429 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:29:44,468 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-20 06:29:44,645 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:29:44,645 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:29:44,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:29:44,646 INFO L85 PathProgramCache]: Analyzing trace with hash 266382380, now seen corresponding path program 1 times [2021-11-20 06:29:44,649 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:29:44,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [911885736] [2021-11-20 06:29:44,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:29:44,650 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:29:44,650 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:29:44,651 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:29:44,686 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-20 06:29:46,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:29:46,219 INFO L263 TraceCheckSpWp]: Trace formula consists of 1488 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 06:29:46,223 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:29:46,729 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:29:46,729 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:29:47,245 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:29:47,245 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:29:47,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [911885736] [2021-11-20 06:29:47,245 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [911885736] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:29:47,246 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:29:47,246 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 7 [2021-11-20 06:29:47,246 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2083197156] [2021-11-20 06:29:47,246 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:29:47,247 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:29:47,247 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:29:47,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:29:47,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:29:47,248 INFO L87 Difference]: Start difference. First operand 4539 states and 6687 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 06:29:48,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:29:48,159 INFO L93 Difference]: Finished difference Result 13594 states and 20069 transitions. [2021-11-20 06:29:48,159 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:29:48,160 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 49 [2021-11-20 06:29:48,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:29:48,236 INFO L225 Difference]: With dead ends: 13594 [2021-11-20 06:29:48,236 INFO L226 Difference]: Without dead ends: 9056 [2021-11-20 06:29:48,263 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 91 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:29:48,266 INFO L933 BasicCegarLoop]: 2704 mSDtfsCounter, 2241 mSDsluCounter, 10370 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2241 SdHoareTripleChecker+Valid, 13074 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:29:48,268 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2241 Valid, 13074 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 06:29:48,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9056 states. [2021-11-20 06:29:48,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9056 to 9056. [2021-11-20 06:29:48,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9056 states, 6921 states have (on average 1.406877618841208) internal successors, (9737), 6993 states have internal predecessors, (9737), 1804 states have call successors, (1804), 331 states have call predecessors, (1804), 330 states have return successors, (1821), 1803 states have call predecessors, (1821), 1803 states have call successors, (1821) [2021-11-20 06:29:48,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9056 states to 9056 states and 13362 transitions. [2021-11-20 06:29:48,968 INFO L78 Accepts]: Start accepts. Automaton has 9056 states and 13362 transitions. Word has length 49 [2021-11-20 06:29:48,969 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:29:48,969 INFO L470 AbstractCegarLoop]: Abstraction has 9056 states and 13362 transitions. [2021-11-20 06:29:48,970 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 06:29:48,970 INFO L276 IsEmpty]: Start isEmpty. Operand 9056 states and 13362 transitions. [2021-11-20 06:29:48,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-20 06:29:48,991 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:29:48,992 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:29:49,032 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-20 06:29:49,205 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:29:49,205 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:29:49,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:29:49,206 INFO L85 PathProgramCache]: Analyzing trace with hash -969454711, now seen corresponding path program 1 times [2021-11-20 06:29:49,208 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:29:49,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1672264769] [2021-11-20 06:29:49,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:29:49,209 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:29:49,209 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:29:49,212 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:29:49,356 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-20 06:29:50,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:29:50,886 INFO L263 TraceCheckSpWp]: Trace formula consists of 1734 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:29:50,891 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:29:51,699 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-20 06:29:51,700 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:29:52,312 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2021-11-20 06:29:52,312 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:29:52,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1672264769] [2021-11-20 06:29:52,312 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1672264769] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:29:52,312 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:29:52,313 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-20 06:29:52,313 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [475945872] [2021-11-20 06:29:52,313 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:29:52,314 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:29:52,314 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:29:52,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:29:52,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:29:52,315 INFO L87 Difference]: Start difference. First operand 9056 states and 13362 transitions. Second operand has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 06:29:53,535 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.00s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:29:54,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:29:54,371 INFO L93 Difference]: Finished difference Result 20089 states and 29613 transitions. [2021-11-20 06:29:54,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:29:54,372 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 117 [2021-11-20 06:29:54,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:29:54,473 INFO L225 Difference]: With dead ends: 20089 [2021-11-20 06:29:54,474 INFO L226 Difference]: Without dead ends: 11043 [2021-11-20 06:29:54,517 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 231 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:29:54,523 INFO L933 BasicCegarLoop]: 2326 mSDtfsCounter, 519 mSDsluCounter, 2210 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 519 SdHoareTripleChecker+Valid, 4536 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2021-11-20 06:29:54,524 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [519 Valid, 4536 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2021-11-20 06:29:54,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11043 states. [2021-11-20 06:29:55,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11043 to 11031. [2021-11-20 06:29:55,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11031 states, 8566 states have (on average 1.4203829091758113) internal successors, (12167), 8638 states have internal predecessors, (12167), 2031 states have call successors, (2031), 434 states have call predecessors, (2031), 433 states have return successors, (2048), 2030 states have call predecessors, (2048), 2030 states have call successors, (2048) [2021-11-20 06:29:55,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11031 states to 11031 states and 16246 transitions. [2021-11-20 06:29:55,186 INFO L78 Accepts]: Start accepts. Automaton has 11031 states and 16246 transitions. Word has length 117 [2021-11-20 06:29:55,187 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:29:55,188 INFO L470 AbstractCegarLoop]: Abstraction has 11031 states and 16246 transitions. [2021-11-20 06:29:55,188 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 06:29:55,188 INFO L276 IsEmpty]: Start isEmpty. Operand 11031 states and 16246 transitions. [2021-11-20 06:29:55,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2021-11-20 06:29:55,226 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:29:55,226 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:29:55,269 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-20 06:29:55,449 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:29:55,449 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:29:55,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:29:55,450 INFO L85 PathProgramCache]: Analyzing trace with hash 104842639, now seen corresponding path program 1 times [2021-11-20 06:29:55,452 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:29:55,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [844615579] [2021-11-20 06:29:55,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:29:55,453 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:29:55,453 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:29:55,455 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:29:55,498 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-20 06:29:57,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:29:57,201 INFO L263 TraceCheckSpWp]: Trace formula consists of 1841 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 06:29:57,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:29:58,123 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 73 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2021-11-20 06:29:58,123 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:29:58,789 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-11-20 06:29:58,789 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:29:58,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [844615579] [2021-11-20 06:29:58,789 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [844615579] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:29:58,789 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:29:58,789 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-20 06:29:58,790 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [828983884] [2021-11-20 06:29:58,790 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:29:58,790 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:29:58,790 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:29:58,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:29:58,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:29:58,791 INFO L87 Difference]: Start difference. First operand 11031 states and 16246 transitions. Second operand has 5 states, 5 states have (on average 25.4) internal successors, (127), 5 states have internal predecessors, (127), 2 states have call successors, (27), 2 states have call predecessors, (27), 2 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) [2021-11-20 06:30:01,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:30:01,341 INFO L93 Difference]: Finished difference Result 22459 states and 33047 transitions. [2021-11-20 06:30:01,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:30:01,342 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 25.4) internal successors, (127), 5 states have internal predecessors, (127), 2 states have call successors, (27), 2 states have call predecessors, (27), 2 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) Word has length 157 [2021-11-20 06:30:01,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:30:01,394 INFO L225 Difference]: With dead ends: 22459 [2021-11-20 06:30:01,394 INFO L226 Difference]: Without dead ends: 11435 [2021-11-20 06:30:01,434 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 315 GetRequests, 309 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:30:01,435 INFO L933 BasicCegarLoop]: 4490 mSDtfsCounter, 2244 mSDsluCounter, 11238 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2244 SdHoareTripleChecker+Valid, 15728 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:30:01,435 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2244 Valid, 15728 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2021-11-20 06:30:01,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11435 states. [2021-11-20 06:30:01,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11435 to 11070. [2021-11-20 06:30:01,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11070 states, 8596 states have (on average 1.418915774778967) internal successors, (12197), 8671 states have internal predecessors, (12197), 2037 states have call successors, (2037), 437 states have call predecessors, (2037), 436 states have return successors, (2054), 2033 states have call predecessors, (2054), 2036 states have call successors, (2054) [2021-11-20 06:30:02,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11070 states to 11070 states and 16288 transitions. [2021-11-20 06:30:02,056 INFO L78 Accepts]: Start accepts. Automaton has 11070 states and 16288 transitions. Word has length 157 [2021-11-20 06:30:02,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:30:02,058 INFO L470 AbstractCegarLoop]: Abstraction has 11070 states and 16288 transitions. [2021-11-20 06:30:02,058 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 25.4) internal successors, (127), 5 states have internal predecessors, (127), 2 states have call successors, (27), 2 states have call predecessors, (27), 2 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) [2021-11-20 06:30:02,058 INFO L276 IsEmpty]: Start isEmpty. Operand 11070 states and 16288 transitions. [2021-11-20 06:30:02,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2021-11-20 06:30:02,088 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:30:02,089 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:30:02,136 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-20 06:30:02,305 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:30:02,305 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:30:02,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:30:02,306 INFO L85 PathProgramCache]: Analyzing trace with hash -1933743724, now seen corresponding path program 1 times [2021-11-20 06:30:02,308 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:30:02,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1280613401] [2021-11-20 06:30:02,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:30:02,308 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:30:02,308 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:30:02,309 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:30:02,316 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-20 06:30:04,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:30:04,418 INFO L263 TraceCheckSpWp]: Trace formula consists of 1862 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 06:30:04,425 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:30:05,445 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2021-11-20 06:30:05,445 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:30:06,592 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2021-11-20 06:30:06,592 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:30:06,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1280613401] [2021-11-20 06:30:06,592 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1280613401] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-20 06:30:06,592 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:30:06,592 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 8 [2021-11-20 06:30:06,592 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427599497] [2021-11-20 06:30:06,593 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:30:06,593 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:30:06,593 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:30:06,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:30:06,594 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:30:06,594 INFO L87 Difference]: Start difference. First operand 11070 states and 16288 transitions. Second operand has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-20 06:30:10,365 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.10s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:30:12,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:30:12,892 INFO L93 Difference]: Finished difference Result 22281 states and 32814 transitions. [2021-11-20 06:30:12,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:30:12,893 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2021-11-20 06:30:12,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:30:12,946 INFO L225 Difference]: With dead ends: 22281 [2021-11-20 06:30:12,946 INFO L226 Difference]: Without dead ends: 11228 [2021-11-20 06:30:12,976 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 325 GetRequests, 318 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:30:12,977 INFO L933 BasicCegarLoop]: 2468 mSDtfsCounter, 1080 mSDsluCounter, 8560 mSDsCounter, 0 mSdLazyCounter, 326 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1289 SdHoareTripleChecker+Valid, 11028 SdHoareTripleChecker+Invalid, 326 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 326 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2021-11-20 06:30:12,978 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1289 Valid, 11028 Invalid, 326 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 326 Invalid, 0 Unknown, 0 Unchecked, 5.7s Time] [2021-11-20 06:30:12,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11228 states. [2021-11-20 06:30:13,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11228 to 11070. [2021-11-20 06:30:13,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11070 states, 8596 states have (on average 1.4184504420660773) internal successors, (12193), 8671 states have internal predecessors, (12193), 2037 states have call successors, (2037), 437 states have call predecessors, (2037), 436 states have return successors, (2054), 2033 states have call predecessors, (2054), 2036 states have call successors, (2054) [2021-11-20 06:30:13,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11070 states to 11070 states and 16284 transitions. [2021-11-20 06:30:13,597 INFO L78 Accepts]: Start accepts. Automaton has 11070 states and 16284 transitions. Word has length 163 [2021-11-20 06:30:13,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:30:13,598 INFO L470 AbstractCegarLoop]: Abstraction has 11070 states and 16284 transitions. [2021-11-20 06:30:13,598 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-20 06:30:13,598 INFO L276 IsEmpty]: Start isEmpty. Operand 11070 states and 16284 transitions. [2021-11-20 06:30:13,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2021-11-20 06:30:13,625 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:30:13,626 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:30:13,672 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-11-20 06:30:13,841 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:30:13,842 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:30:13,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:30:13,842 INFO L85 PathProgramCache]: Analyzing trace with hash 639220886, now seen corresponding path program 1 times [2021-11-20 06:30:13,844 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:30:13,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1176771140] [2021-11-20 06:30:13,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:30:13,844 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:30:13,844 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:30:13,845 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:30:13,846 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-20 06:30:15,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:30:15,900 INFO L263 TraceCheckSpWp]: Trace formula consists of 1862 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 06:30:15,905 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:30:16,642 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-20 06:30:16,642 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:30:17,542 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2021-11-20 06:30:17,543 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:30:17,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1176771140] [2021-11-20 06:30:17,543 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1176771140] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:30:17,543 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:30:17,543 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-20 06:30:17,543 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931088579] [2021-11-20 06:30:17,543 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:30:17,544 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:30:17,544 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:30:17,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:30:17,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:30:17,545 INFO L87 Difference]: Start difference. First operand 11070 states and 16284 transitions. Second operand has 8 states, 6 states have (on average 22.0) internal successors, (132), 7 states have internal predecessors, (132), 4 states have call successors, (24), 2 states have call predecessors, (24), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2021-11-20 06:30:22,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:30:22,083 INFO L93 Difference]: Finished difference Result 28179 states and 42236 transitions. [2021-11-20 06:30:22,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:30:22,084 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 22.0) internal successors, (132), 7 states have internal predecessors, (132), 4 states have call successors, (24), 2 states have call predecessors, (24), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 163 [2021-11-20 06:30:22,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:30:22,170 INFO L225 Difference]: With dead ends: 28179 [2021-11-20 06:30:22,170 INFO L226 Difference]: Without dead ends: 17126 [2021-11-20 06:30:22,207 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 325 GetRequests, 318 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:30:22,208 INFO L933 BasicCegarLoop]: 3534 mSDtfsCounter, 1085 mSDsluCounter, 19757 mSDsCounter, 0 mSdLazyCounter, 653 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1295 SdHoareTripleChecker+Valid, 23291 SdHoareTripleChecker+Invalid, 849 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 653 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 196 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:30:22,208 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1295 Valid, 23291 Invalid, 849 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [0 Valid, 653 Invalid, 0 Unknown, 196 Unchecked, 3.8s Time] [2021-11-20 06:30:22,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17126 states. [2021-11-20 06:30:23,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17126 to 11070. [2021-11-20 06:30:23,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11070 states, 8596 states have (on average 1.4177524429967427) internal successors, (12187), 8671 states have internal predecessors, (12187), 2037 states have call successors, (2037), 437 states have call predecessors, (2037), 436 states have return successors, (2054), 2033 states have call predecessors, (2054), 2036 states have call successors, (2054) [2021-11-20 06:30:23,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11070 states to 11070 states and 16278 transitions. [2021-11-20 06:30:23,097 INFO L78 Accepts]: Start accepts. Automaton has 11070 states and 16278 transitions. Word has length 163 [2021-11-20 06:30:23,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:30:23,099 INFO L470 AbstractCegarLoop]: Abstraction has 11070 states and 16278 transitions. [2021-11-20 06:30:23,100 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 22.0) internal successors, (132), 7 states have internal predecessors, (132), 4 states have call successors, (24), 2 states have call predecessors, (24), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2021-11-20 06:30:23,100 INFO L276 IsEmpty]: Start isEmpty. Operand 11070 states and 16278 transitions. [2021-11-20 06:30:23,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2021-11-20 06:30:23,130 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:30:23,131 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:30:23,181 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-20 06:30:23,353 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:30:23,353 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:30:23,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:30:23,354 INFO L85 PathProgramCache]: Analyzing trace with hash -1694171752, now seen corresponding path program 1 times [2021-11-20 06:30:23,356 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:30:23,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1205929980] [2021-11-20 06:30:23,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:30:23,358 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:30:23,359 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:30:23,360 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:30:23,405 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-20 06:30:25,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:30:25,814 INFO L263 TraceCheckSpWp]: Trace formula consists of 1862 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 06:30:25,817 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:30:26,533 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-20 06:30:26,533 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:30:27,308 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:30:27,308 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:30:27,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1205929980] [2021-11-20 06:30:27,308 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1205929980] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:30:27,308 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:30:27,309 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2021-11-20 06:30:27,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1440797931] [2021-11-20 06:30:27,309 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:30:27,309 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:30:27,310 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:30:27,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:30:27,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:30:27,310 INFO L87 Difference]: Start difference. First operand 11070 states and 16278 transitions. Second operand has 8 states, 8 states have (on average 15.375) internal successors, (123), 6 states have internal predecessors, (123), 2 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (21), 4 states have call predecessors, (21), 2 states have call successors, (21) [2021-11-20 06:30:27,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:30:27,777 INFO L93 Difference]: Finished difference Result 22279 states and 32889 transitions. [2021-11-20 06:30:27,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:30:27,778 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 15.375) internal successors, (123), 6 states have internal predecessors, (123), 2 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (21), 4 states have call predecessors, (21), 2 states have call successors, (21) Word has length 163 [2021-11-20 06:30:27,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:30:27,940 INFO L225 Difference]: With dead ends: 22279 [2021-11-20 06:30:27,940 INFO L226 Difference]: Without dead ends: 11226 [2021-11-20 06:30:27,966 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 318 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:30:27,967 INFO L933 BasicCegarLoop]: 2269 mSDtfsCounter, 17 mSDsluCounter, 6802 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 9071 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:30:27,967 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [19 Valid, 9071 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:30:27,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11226 states. [2021-11-20 06:30:28,589 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11226 to 11118. [2021-11-20 06:30:28,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11118 states, 8632 states have (on average 1.4160101946246524) internal successors, (12223), 8707 states have internal predecessors, (12223), 2037 states have call successors, (2037), 437 states have call predecessors, (2037), 448 states have return successors, (2150), 2045 states have call predecessors, (2150), 2036 states have call successors, (2150) [2021-11-20 06:30:28,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11118 states to 11118 states and 16410 transitions. [2021-11-20 06:30:28,666 INFO L78 Accepts]: Start accepts. Automaton has 11118 states and 16410 transitions. Word has length 163 [2021-11-20 06:30:28,667 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:30:28,667 INFO L470 AbstractCegarLoop]: Abstraction has 11118 states and 16410 transitions. [2021-11-20 06:30:28,668 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 15.375) internal successors, (123), 6 states have internal predecessors, (123), 2 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (21), 4 states have call predecessors, (21), 2 states have call successors, (21) [2021-11-20 06:30:28,668 INFO L276 IsEmpty]: Start isEmpty. Operand 11118 states and 16410 transitions. [2021-11-20 06:30:28,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 166 [2021-11-20 06:30:28,700 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:30:28,701 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:30:28,755 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-20 06:30:28,917 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:30:28,917 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:30:28,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:30:28,918 INFO L85 PathProgramCache]: Analyzing trace with hash -320678795, now seen corresponding path program 1 times [2021-11-20 06:30:28,920 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:30:28,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1617283346] [2021-11-20 06:30:28,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:30:28,921 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:30:28,921 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:30:28,923 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:30:28,937 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-20 06:30:31,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:30:31,306 INFO L263 TraceCheckSpWp]: Trace formula consists of 1865 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-20 06:30:31,311 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:30:31,987 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-11-20 06:30:31,987 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:30:33,111 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-11-20 06:30:33,111 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:30:33,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1617283346] [2021-11-20 06:30:33,111 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1617283346] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:30:33,112 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:30:33,112 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-20 06:30:33,112 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577411514] [2021-11-20 06:30:33,112 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:30:33,113 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:30:33,113 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:30:33,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:30:33,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:30:33,114 INFO L87 Difference]: Start difference. First operand 11118 states and 16410 transitions. Second operand has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-20 06:30:33,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:30:33,590 INFO L93 Difference]: Finished difference Result 22257 states and 32907 transitions. [2021-11-20 06:30:33,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:30:33,591 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 2 states have call successors, (17) Word has length 165 [2021-11-20 06:30:33,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:30:33,638 INFO L225 Difference]: With dead ends: 22257 [2021-11-20 06:30:33,638 INFO L226 Difference]: Without dead ends: 11156 [2021-11-20 06:30:33,666 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 328 GetRequests, 325 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:30:33,667 INFO L933 BasicCegarLoop]: 2267 mSDtfsCounter, 2 mSDsluCounter, 6796 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9063 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:30:33,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9063 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:30:33,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11156 states. [2021-11-20 06:30:34,251 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11156 to 11148. [2021-11-20 06:30:34,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11148 states, 8653 states have (on average 1.4150005778342771) internal successors, (12244), 8731 states have internal predecessors, (12244), 2037 states have call successors, (2037), 437 states have call predecessors, (2037), 457 states have return successors, (2167), 2051 states have call predecessors, (2167), 2036 states have call successors, (2167) [2021-11-20 06:30:34,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11148 states to 11148 states and 16448 transitions. [2021-11-20 06:30:34,315 INFO L78 Accepts]: Start accepts. Automaton has 11148 states and 16448 transitions. Word has length 165 [2021-11-20 06:30:34,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:30:34,316 INFO L470 AbstractCegarLoop]: Abstraction has 11148 states and 16448 transitions. [2021-11-20 06:30:34,316 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-20 06:30:34,316 INFO L276 IsEmpty]: Start isEmpty. Operand 11148 states and 16448 transitions. [2021-11-20 06:30:34,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-11-20 06:30:34,349 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:30:34,350 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:30:34,405 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-20 06:30:34,573 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:30:34,573 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:30:34,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:30:34,573 INFO L85 PathProgramCache]: Analyzing trace with hash 1424768948, now seen corresponding path program 1 times [2021-11-20 06:30:34,576 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:30:34,576 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1132045882] [2021-11-20 06:30:34,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:30:34,576 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:30:34,577 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:30:34,578 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:30:34,622 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-20 06:30:36,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:30:36,857 INFO L263 TraceCheckSpWp]: Trace formula consists of 1888 conjuncts, 24 conjunts are in the unsatisfiable core [2021-11-20 06:30:36,862 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:30:38,633 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-11-20 06:30:38,633 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:30:42,410 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-11-20 06:30:42,410 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:30:42,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1132045882] [2021-11-20 06:30:42,411 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1132045882] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:30:42,411 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:30:42,411 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13, 13] imperfect sequences [] total 14 [2021-11-20 06:30:42,411 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [161764145] [2021-11-20 06:30:42,411 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:30:42,412 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-20 06:30:42,412 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:30:42,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-20 06:30:42,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=155, Unknown=0, NotChecked=0, Total=182 [2021-11-20 06:30:42,413 INFO L87 Difference]: Start difference. First operand 11148 states and 16448 transitions. Second operand has 14 states, 14 states have (on average 8.285714285714286) internal successors, (116), 10 states have internal predecessors, (116), 2 states have call successors, (19), 2 states have call predecessors, (19), 6 states have return successors, (18), 6 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:30:44,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:30:44,824 INFO L93 Difference]: Finished difference Result 28385 states and 42786 transitions. [2021-11-20 06:30:44,829 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 06:30:44,829 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.285714285714286) internal successors, (116), 10 states have internal predecessors, (116), 2 states have call successors, (19), 2 states have call predecessors, (19), 6 states have return successors, (18), 6 states have call predecessors, (18), 2 states have call successors, (18) Word has length 172 [2021-11-20 06:30:44,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:30:44,995 INFO L225 Difference]: With dead ends: 28385 [2021-11-20 06:30:44,996 INFO L226 Difference]: Without dead ends: 17254 [2021-11-20 06:30:45,031 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 346 GetRequests, 331 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=40, Invalid=232, Unknown=0, NotChecked=0, Total=272 [2021-11-20 06:30:45,031 INFO L933 BasicCegarLoop]: 3647 mSDtfsCounter, 1091 mSDsluCounter, 38800 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1300 SdHoareTripleChecker+Valid, 42447 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:30:45,032 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1300 Valid, 42447 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2021-11-20 06:30:45,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17254 states. [2021-11-20 06:30:46,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17254 to 11184. [2021-11-20 06:30:46,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11184 states, 8680 states have (on average 1.4130184331797235) internal successors, (12265), 8755 states have internal predecessors, (12265), 2037 states have call successors, (2037), 437 states have call predecessors, (2037), 466 states have return successors, (2200), 2063 states have call predecessors, (2200), 2036 states have call successors, (2200) [2021-11-20 06:30:46,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11184 states to 11184 states and 16502 transitions. [2021-11-20 06:30:46,237 INFO L78 Accepts]: Start accepts. Automaton has 11184 states and 16502 transitions. Word has length 172 [2021-11-20 06:30:46,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:30:46,238 INFO L470 AbstractCegarLoop]: Abstraction has 11184 states and 16502 transitions. [2021-11-20 06:30:46,238 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.285714285714286) internal successors, (116), 10 states have internal predecessors, (116), 2 states have call successors, (19), 2 states have call predecessors, (19), 6 states have return successors, (18), 6 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:30:46,239 INFO L276 IsEmpty]: Start isEmpty. Operand 11184 states and 16502 transitions. [2021-11-20 06:30:46,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2021-11-20 06:30:46,259 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:30:46,259 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:30:46,314 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-20 06:30:46,475 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:30:46,475 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:30:46,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:30:46,476 INFO L85 PathProgramCache]: Analyzing trace with hash 1685717248, now seen corresponding path program 1 times [2021-11-20 06:30:46,478 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:30:46,478 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [907464896] [2021-11-20 06:30:46,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:30:46,478 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:30:46,478 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:30:46,479 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:30:46,480 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-20 06:30:48,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:30:48,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 1898 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:30:48,836 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:30:49,274 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:30:49,274 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:30:49,706 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:30:49,706 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:30:49,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [907464896] [2021-11-20 06:30:49,706 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [907464896] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:30:49,706 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:30:49,707 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:30:49,707 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25490280] [2021-11-20 06:30:49,707 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:30:49,708 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:30:49,709 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:30:49,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:30:49,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:30:49,710 INFO L87 Difference]: Start difference. First operand 11184 states and 16502 transitions. Second operand has 4 states, 4 states have (on average 30.25) internal successors, (121), 4 states have internal predecessors, (121), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:30:52,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:30:52,436 INFO L93 Difference]: Finished difference Result 35297 states and 53835 transitions. [2021-11-20 06:30:52,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:30:52,437 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 30.25) internal successors, (121), 4 states have internal predecessors, (121), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 178 [2021-11-20 06:30:52,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:30:52,518 INFO L225 Difference]: With dead ends: 35297 [2021-11-20 06:30:52,518 INFO L226 Difference]: Without dead ends: 24130 [2021-11-20 06:30:52,549 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 354 GetRequests, 352 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:30:52,550 INFO L933 BasicCegarLoop]: 3881 mSDtfsCounter, 2150 mSDsluCounter, 5919 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2564 SdHoareTripleChecker+Valid, 9800 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2021-11-20 06:30:52,551 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2564 Valid, 9800 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2021-11-20 06:30:52,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24130 states. [2021-11-20 06:30:53,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24130 to 11238. [2021-11-20 06:30:53,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11238 states, 8722 states have (on average 1.4124054116028433) internal successors, (12319), 8797 states have internal predecessors, (12319), 2049 states have call successors, (2049), 437 states have call predecessors, (2049), 466 states have return successors, (2212), 2075 states have call predecessors, (2212), 2048 states have call successors, (2212) [2021-11-20 06:30:53,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11238 states to 11238 states and 16580 transitions. [2021-11-20 06:30:53,538 INFO L78 Accepts]: Start accepts. Automaton has 11238 states and 16580 transitions. Word has length 178 [2021-11-20 06:30:53,539 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:30:53,539 INFO L470 AbstractCegarLoop]: Abstraction has 11238 states and 16580 transitions. [2021-11-20 06:30:53,539 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 30.25) internal successors, (121), 4 states have internal predecessors, (121), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:30:53,539 INFO L276 IsEmpty]: Start isEmpty. Operand 11238 states and 16580 transitions. [2021-11-20 06:30:53,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2021-11-20 06:30:53,555 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:30:53,555 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:30:53,607 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-11-20 06:30:53,777 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:30:53,777 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:30:53,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:30:53,778 INFO L85 PathProgramCache]: Analyzing trace with hash 711929151, now seen corresponding path program 1 times [2021-11-20 06:30:53,779 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:30:53,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1841257170] [2021-11-20 06:30:53,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:30:53,780 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:30:53,780 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:30:53,781 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:30:53,791 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-20 06:30:56,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:30:56,226 INFO L263 TraceCheckSpWp]: Trace formula consists of 1913 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 06:30:56,231 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:30:56,814 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2021-11-20 06:30:56,814 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:30:57,703 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2021-11-20 06:30:57,703 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:30:57,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1841257170] [2021-11-20 06:30:57,704 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1841257170] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:30:57,704 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:30:57,704 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-20 06:30:57,704 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [653906687] [2021-11-20 06:30:57,704 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:30:57,705 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:30:57,705 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:30:57,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:30:57,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:30:57,706 INFO L87 Difference]: Start difference. First operand 11238 states and 16580 transitions. Second operand has 8 states, 6 states have (on average 20.666666666666668) internal successors, (124), 7 states have internal predecessors, (124), 4 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (20), 3 states have call predecessors, (20), 4 states have call successors, (20) [2021-11-20 06:31:02,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:31:02,585 INFO L93 Difference]: Finished difference Result 28527 states and 42920 transitions. [2021-11-20 06:31:02,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:31:02,586 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 20.666666666666668) internal successors, (124), 7 states have internal predecessors, (124), 4 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (20), 3 states have call predecessors, (20), 4 states have call successors, (20) Word has length 182 [2021-11-20 06:31:02,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:31:02,664 INFO L225 Difference]: With dead ends: 28527 [2021-11-20 06:31:02,664 INFO L226 Difference]: Without dead ends: 17306 [2021-11-20 06:31:02,706 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 363 GetRequests, 356 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:31:02,707 INFO L933 BasicCegarLoop]: 3536 mSDtfsCounter, 1005 mSDsluCounter, 19868 mSDsCounter, 0 mSdLazyCounter, 655 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1194 SdHoareTripleChecker+Valid, 23404 SdHoareTripleChecker+Invalid, 851 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 655 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 196 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:31:02,707 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1194 Valid, 23404 Invalid, 851 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 655 Invalid, 0 Unknown, 196 Unchecked, 3.8s Time] [2021-11-20 06:31:02,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17306 states. [2021-11-20 06:31:03,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17306 to 11238. [2021-11-20 06:31:03,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11238 states, 8722 states have (on average 1.411717495987159) internal successors, (12313), 8797 states have internal predecessors, (12313), 2049 states have call successors, (2049), 437 states have call predecessors, (2049), 466 states have return successors, (2212), 2075 states have call predecessors, (2212), 2048 states have call successors, (2212) [2021-11-20 06:31:03,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11238 states to 11238 states and 16574 transitions. [2021-11-20 06:31:03,640 INFO L78 Accepts]: Start accepts. Automaton has 11238 states and 16574 transitions. Word has length 182 [2021-11-20 06:31:03,640 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:31:03,641 INFO L470 AbstractCegarLoop]: Abstraction has 11238 states and 16574 transitions. [2021-11-20 06:31:03,641 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 20.666666666666668) internal successors, (124), 7 states have internal predecessors, (124), 4 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (20), 3 states have call predecessors, (20), 4 states have call successors, (20) [2021-11-20 06:31:03,641 INFO L276 IsEmpty]: Start isEmpty. Operand 11238 states and 16574 transitions. [2021-11-20 06:31:03,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2021-11-20 06:31:03,661 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:31:03,661 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:31:03,714 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-20 06:31:03,885 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:31:03,885 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:31:03,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:31:03,885 INFO L85 PathProgramCache]: Analyzing trace with hash 773968765, now seen corresponding path program 1 times [2021-11-20 06:31:03,887 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:31:03,887 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1636054804] [2021-11-20 06:31:03,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:31:03,888 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:31:03,888 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:31:03,889 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:31:03,890 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-20 06:31:06,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:31:06,497 INFO L263 TraceCheckSpWp]: Trace formula consists of 1913 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 06:31:06,502 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:31:07,297 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:31:07,297 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:31:07,895 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 134 trivial. 0 not checked. [2021-11-20 06:31:07,895 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:31:07,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1636054804] [2021-11-20 06:31:07,896 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1636054804] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:31:07,896 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:31:07,896 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 5 [2021-11-20 06:31:07,896 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [997615973] [2021-11-20 06:31:07,896 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:31:07,897 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:31:07,897 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:31:07,897 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:31:07,897 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:31:07,897 INFO L87 Difference]: Start difference. First operand 11238 states and 16574 transitions. Second operand has 5 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 4 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2021-11-20 06:31:15,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:31:15,181 INFO L93 Difference]: Finished difference Result 41161 states and 63238 transitions. [2021-11-20 06:31:15,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:31:15,182 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 4 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) Word has length 182 [2021-11-20 06:31:15,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:31:15,295 INFO L225 Difference]: With dead ends: 41161 [2021-11-20 06:31:15,295 INFO L226 Difference]: Without dead ends: 29940 [2021-11-20 06:31:15,318 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 362 GetRequests, 358 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:31:15,319 INFO L933 BasicCegarLoop]: 5068 mSDtfsCounter, 3160 mSDsluCounter, 11591 mSDsCounter, 0 mSdLazyCounter, 815 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3761 SdHoareTripleChecker+Valid, 16659 SdHoareTripleChecker+Invalid, 819 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 815 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:31:15,320 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3761 Valid, 16659 Invalid, 819 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 815 Invalid, 0 Unknown, 0 Unchecked, 5.8s Time] [2021-11-20 06:31:15,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29940 states. [2021-11-20 06:31:16,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29940 to 11250. [2021-11-20 06:31:16,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11250 states, 8734 states have (on average 1.4111518204717197) internal successors, (12325), 8809 states have internal predecessors, (12325), 2049 states have call successors, (2049), 437 states have call predecessors, (2049), 466 states have return successors, (2212), 2075 states have call predecessors, (2212), 2048 states have call successors, (2212) [2021-11-20 06:31:16,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11250 states to 11250 states and 16586 transitions. [2021-11-20 06:31:16,257 INFO L78 Accepts]: Start accepts. Automaton has 11250 states and 16586 transitions. Word has length 182 [2021-11-20 06:31:16,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:31:16,259 INFO L470 AbstractCegarLoop]: Abstraction has 11250 states and 16586 transitions. [2021-11-20 06:31:16,259 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 4 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2021-11-20 06:31:16,259 INFO L276 IsEmpty]: Start isEmpty. Operand 11250 states and 16586 transitions. [2021-11-20 06:31:16,277 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2021-11-20 06:31:16,278 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:31:16,278 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:31:16,328 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Ended with exit code 0 [2021-11-20 06:31:16,493 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:31:16,493 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:31:16,494 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:31:16,494 INFO L85 PathProgramCache]: Analyzing trace with hash 1073399476, now seen corresponding path program 1 times [2021-11-20 06:31:16,496 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:31:16,496 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2005586590] [2021-11-20 06:31:16,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:31:16,497 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:31:16,497 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:31:16,498 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:31:16,510 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-20 06:31:18,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:31:18,939 INFO L263 TraceCheckSpWp]: Trace formula consists of 1926 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 06:31:18,944 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:31:19,600 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:31:19,600 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:31:20,116 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-11-20 06:31:20,116 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:31:20,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2005586590] [2021-11-20 06:31:20,116 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2005586590] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:31:20,116 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:31:20,116 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-20 06:31:20,117 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1484727637] [2021-11-20 06:31:20,117 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:31:20,117 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:31:20,117 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:31:20,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:31:20,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:31:20,118 INFO L87 Difference]: Start difference. First operand 11250 states and 16586 transitions. Second operand has 5 states, 5 states have (on average 24.4) internal successors, (122), 4 states have internal predecessors, (122), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 06:31:21,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:31:21,236 INFO L93 Difference]: Finished difference Result 28575 states and 42962 transitions. [2021-11-20 06:31:21,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:31:21,237 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 24.4) internal successors, (122), 4 states have internal predecessors, (122), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) Word has length 183 [2021-11-20 06:31:21,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:31:21,292 INFO L225 Difference]: With dead ends: 28575 [2021-11-20 06:31:21,292 INFO L226 Difference]: Without dead ends: 17342 [2021-11-20 06:31:21,323 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 365 GetRequests, 361 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:31:21,324 INFO L933 BasicCegarLoop]: 3651 mSDtfsCounter, 1070 mSDsluCounter, 9663 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1277 SdHoareTripleChecker+Valid, 13314 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:31:21,324 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1277 Valid, 13314 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:31:21,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17342 states. [2021-11-20 06:31:21,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17342 to 11250. [2021-11-20 06:31:22,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11250 states, 8734 states have (on average 1.4097778795511793) internal successors, (12313), 8809 states have internal predecessors, (12313), 2049 states have call successors, (2049), 437 states have call predecessors, (2049), 466 states have return successors, (2212), 2075 states have call predecessors, (2212), 2048 states have call successors, (2212) [2021-11-20 06:31:22,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11250 states to 11250 states and 16574 transitions. [2021-11-20 06:31:22,145 INFO L78 Accepts]: Start accepts. Automaton has 11250 states and 16574 transitions. Word has length 183 [2021-11-20 06:31:22,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:31:22,148 INFO L470 AbstractCegarLoop]: Abstraction has 11250 states and 16574 transitions. [2021-11-20 06:31:22,148 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 24.4) internal successors, (122), 4 states have internal predecessors, (122), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 06:31:22,149 INFO L276 IsEmpty]: Start isEmpty. Operand 11250 states and 16574 transitions. [2021-11-20 06:31:22,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-11-20 06:31:22,167 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:31:22,168 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:31:22,221 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-20 06:31:22,389 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:31:22,389 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:31:22,389 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:31:22,389 INFO L85 PathProgramCache]: Analyzing trace with hash -1941599003, now seen corresponding path program 1 times [2021-11-20 06:31:22,391 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:31:22,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [374639053] [2021-11-20 06:31:22,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:31:22,392 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:31:22,392 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:31:22,393 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:31:22,396 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2907a324-6eac-4a1b-8698-7db9c9d1a8b1/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process