./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 07:39:23,553 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 07:39:23,556 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 07:39:23,597 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 07:39:23,598 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 07:39:23,602 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 07:39:23,604 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 07:39:23,608 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 07:39:23,610 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 07:39:23,616 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 07:39:23,617 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 07:39:23,619 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 07:39:23,619 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 07:39:23,622 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 07:39:23,625 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 07:39:23,631 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 07:39:23,632 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 07:39:23,633 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 07:39:23,635 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 07:39:23,645 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 07:39:23,647 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 07:39:23,648 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 07:39:23,652 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 07:39:23,653 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 07:39:23,662 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 07:39:23,662 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 07:39:23,662 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 07:39:23,665 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 07:39:23,665 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 07:39:23,667 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 07:39:23,668 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 07:39:23,669 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 07:39:23,671 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 07:39:23,672 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 07:39:23,674 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 07:39:23,674 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 07:39:23,675 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 07:39:23,675 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 07:39:23,676 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 07:39:23,676 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 07:39:23,677 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 07:39:23,678 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-20 07:39:23,715 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 07:39:23,715 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 07:39:23,715 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 07:39:23,716 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 07:39:23,716 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 07:39:23,717 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 07:39:23,717 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 07:39:23,718 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 07:39:23,718 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 07:39:23,718 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 07:39:23,718 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 07:39:23,719 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 07:39:23,719 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 07:39:23,719 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 07:39:23,719 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 07:39:23,720 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 07:39:23,720 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 07:39:23,720 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 07:39:23,720 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 07:39:23,721 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 07:39:23,721 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 07:39:23,721 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:39:23,721 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 07:39:23,722 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 07:39:23,722 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 07:39:23,722 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 07:39:23,722 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 07:39:23,722 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 07:39:23,723 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 07:39:23,723 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 07:39:23,723 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 07:39:23,723 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2021-11-20 07:39:23,964 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 07:39:23,987 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 07:39:23,989 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 07:39:23,991 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 07:39:23,993 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 07:39:23,995 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 07:39:24,068 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/f99aa4326/e46e72166f4a42e8a66c0cdc17f37026/FLAGfd1df0021 [2021-11-20 07:39:24,859 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 07:39:24,860 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 07:39:24,901 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/f99aa4326/e46e72166f4a42e8a66c0cdc17f37026/FLAGfd1df0021 [2021-11-20 07:39:25,404 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/f99aa4326/e46e72166f4a42e8a66c0cdc17f37026 [2021-11-20 07:39:25,408 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 07:39:25,409 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 07:39:25,411 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 07:39:25,411 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 07:39:25,415 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 07:39:25,416 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:39:25" (1/1) ... [2021-11-20 07:39:25,417 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2f44f9c8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:25, skipping insertion in model container [2021-11-20 07:39:25,417 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:39:25" (1/1) ... [2021-11-20 07:39:25,424 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 07:39:25,568 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 07:39:26,524 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-20 07:39:27,100 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:39:27,131 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 07:39:27,359 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-20 07:39:27,557 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:39:27,682 INFO L208 MainTranslator]: Completed translation [2021-11-20 07:39:27,684 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27 WrapperNode [2021-11-20 07:39:27,684 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 07:39:27,686 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 07:39:27,686 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 07:39:27,686 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 07:39:27,694 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:27,781 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:27,943 INFO L137 Inliner]: procedures = 157, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2337 [2021-11-20 07:39:27,944 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 07:39:27,945 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 07:39:27,945 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 07:39:27,945 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 07:39:27,959 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:27,960 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:27,987 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:27,987 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:28,096 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:28,122 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:28,136 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:28,154 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 07:39:28,155 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 07:39:28,155 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 07:39:28,155 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 07:39:28,156 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (1/1) ... [2021-11-20 07:39:28,163 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:39:28,173 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:39:28,184 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 07:39:28,196 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 07:39:28,238 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-20 07:39:28,238 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-20 07:39:28,238 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-20 07:39:28,239 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-20 07:39:28,239 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-20 07:39:28,239 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2021-11-20 07:39:28,239 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2021-11-20 07:39:28,239 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2021-11-20 07:39:28,239 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2021-11-20 07:39:28,239 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2021-11-20 07:39:28,239 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2021-11-20 07:39:28,240 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 07:39:28,240 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 07:39:28,240 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-20 07:39:28,240 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-20 07:39:28,240 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 07:39:28,240 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 07:39:28,240 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-20 07:39:28,241 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-20 07:39:28,241 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-20 07:39:28,241 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-20 07:39:28,242 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-20 07:39:28,242 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-20 07:39:28,242 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-20 07:39:28,242 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 07:39:28,242 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 07:39:28,242 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-20 07:39:28,242 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-20 07:39:28,242 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 07:39:28,243 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 07:39:28,243 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-20 07:39:28,243 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-20 07:39:28,243 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-20 07:39:28,243 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-20 07:39:28,243 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-20 07:39:28,243 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-20 07:39:28,243 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-20 07:39:28,244 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-20 07:39:28,244 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 07:39:28,244 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 07:39:28,244 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-20 07:39:28,244 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2021-11-20 07:39:28,244 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2021-11-20 07:39:28,245 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 07:39:28,245 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 07:39:28,245 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-20 07:39:28,245 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-20 07:39:28,245 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 07:39:28,245 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 07:39:28,246 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-20 07:39:28,246 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-20 07:39:28,246 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 07:39:28,246 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 07:39:28,246 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 07:39:28,246 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 07:39:28,247 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 07:39:28,247 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-20 07:39:28,248 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-20 07:39:28,248 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 07:39:28,249 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-20 07:39:28,249 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-20 07:39:28,250 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 07:39:28,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 07:39:28,250 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-20 07:39:28,250 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-20 07:39:28,250 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 07:39:28,250 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-20 07:39:28,250 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-20 07:39:28,250 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-20 07:39:28,250 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-20 07:39:28,251 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-20 07:39:28,251 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-20 07:39:28,251 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 07:39:28,252 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 07:39:28,252 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-20 07:39:28,252 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-20 07:39:28,252 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2021-11-20 07:39:28,252 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2021-11-20 07:39:28,252 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 07:39:28,252 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-20 07:39:28,252 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-20 07:39:28,253 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-20 07:39:28,253 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-20 07:39:28,253 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-20 07:39:28,253 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-20 07:39:28,253 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-20 07:39:28,253 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-20 07:39:28,253 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-20 07:39:28,253 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-20 07:39:28,254 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 07:39:28,254 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 07:39:28,254 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-20 07:39:28,255 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-20 07:39:28,760 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 07:39:28,762 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 07:39:28,883 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 07:39:32,989 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 07:39:33,014 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 07:39:33,014 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 07:39:33,019 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:39:33 BoogieIcfgContainer [2021-11-20 07:39:33,019 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 07:39:33,023 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 07:39:33,023 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 07:39:33,026 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 07:39:33,027 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 07:39:25" (1/3) ... [2021-11-20 07:39:33,027 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3f7c91f5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:39:33, skipping insertion in model container [2021-11-20 07:39:33,028 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:39:27" (2/3) ... [2021-11-20 07:39:33,028 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3f7c91f5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:39:33, skipping insertion in model container [2021-11-20 07:39:33,029 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:39:33" (3/3) ... [2021-11-20 07:39:33,031 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 07:39:33,037 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 07:39:33,037 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 07:39:33,112 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 07:39:33,127 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 07:39:33,128 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 07:39:33,180 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2021-11-20 07:39:33,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-11-20 07:39:33,202 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:39:33,203 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:39:33,206 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:39:33,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:39:33,213 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2021-11-20 07:39:33,222 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:39:33,222 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636917881] [2021-11-20 07:39:33,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:39:33,225 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:39:33,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:33,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:39:33,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:33,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:39:33,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:33,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:39:33,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:33,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:39:33,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:33,883 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 07:39:33,883 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:39:33,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636917881] [2021-11-20 07:39:33,884 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [636917881] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:39:33,884 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:39:33,885 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:39:33,886 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1982945245] [2021-11-20 07:39:33,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:39:33,891 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:39:33,891 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:39:33,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:39:33,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:39:33,922 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 07:39:36,291 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:39:38,314 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:39:41,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:39:41,498 INFO L93 Difference]: Finished difference Result 2121 states and 3115 transitions. [2021-11-20 07:39:41,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:39:41,502 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2021-11-20 07:39:41,503 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:39:41,548 INFO L225 Difference]: With dead ends: 2121 [2021-11-20 07:39:41,548 INFO L226 Difference]: Without dead ends: 1432 [2021-11-20 07:39:41,560 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:39:41,565 INFO L933 BasicCegarLoop]: 1045 mSDtfsCounter, 1384 mSDsluCounter, 1779 mSDsCounter, 0 mSdLazyCounter, 962 mSolverCounterSat, 685 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1493 SdHoareTripleChecker+Valid, 2824 SdHoareTripleChecker+Invalid, 1649 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 685 IncrementalHoareTripleChecker+Valid, 962 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:39:41,566 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1493 Valid, 2824 Invalid, 1649 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [685 Valid, 962 Invalid, 2 Unknown, 0 Unchecked, 7.3s Time] [2021-11-20 07:39:41,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1432 states. [2021-11-20 07:39:41,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1432 to 1286. [2021-11-20 07:39:41,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1286 states, 957 states have (on average 1.3657262277951934) internal successors, (1307), 971 states have internal predecessors, (1307), 256 states have call successors, (256), 73 states have call predecessors, (256), 72 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2021-11-20 07:39:41,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1286 states to 1286 states and 1818 transitions. [2021-11-20 07:39:41,803 INFO L78 Accepts]: Start accepts. Automaton has 1286 states and 1818 transitions. Word has length 45 [2021-11-20 07:39:41,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:39:41,804 INFO L470 AbstractCegarLoop]: Abstraction has 1286 states and 1818 transitions. [2021-11-20 07:39:41,805 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 07:39:41,805 INFO L276 IsEmpty]: Start isEmpty. Operand 1286 states and 1818 transitions. [2021-11-20 07:39:41,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-20 07:39:41,810 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:39:41,811 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:39:41,811 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 07:39:41,812 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:39:41,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:39:41,812 INFO L85 PathProgramCache]: Analyzing trace with hash -1828543170, now seen corresponding path program 1 times [2021-11-20 07:39:41,813 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:39:41,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860278778] [2021-11-20 07:39:41,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:39:41,813 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:39:41,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:42,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:39:42,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:42,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:39:42,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:42,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:39:42,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:42,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:39:42,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:42,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 07:39:42,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:42,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 07:39:42,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:42,280 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-20 07:39:42,280 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:39:42,280 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860278778] [2021-11-20 07:39:42,281 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [860278778] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:39:42,281 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:39:42,281 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 07:39:42,281 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489010616] [2021-11-20 07:39:42,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:39:42,283 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:39:42,288 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:39:42,288 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:39:42,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:39:42,289 INFO L87 Difference]: Start difference. First operand 1286 states and 1818 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-20 07:39:44,595 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:39:46,620 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:39:50,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:39:50,200 INFO L93 Difference]: Finished difference Result 4123 states and 5934 transitions. [2021-11-20 07:39:50,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 07:39:50,201 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2021-11-20 07:39:50,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:39:50,227 INFO L225 Difference]: With dead ends: 4123 [2021-11-20 07:39:50,227 INFO L226 Difference]: Without dead ends: 2839 [2021-11-20 07:39:50,233 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2021-11-20 07:39:50,235 INFO L933 BasicCegarLoop]: 1093 mSDtfsCounter, 1367 mSDsluCounter, 3886 mSDsCounter, 0 mSdLazyCounter, 1326 mSolverCounterSat, 663 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1473 SdHoareTripleChecker+Valid, 4979 SdHoareTripleChecker+Invalid, 1991 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 663 IncrementalHoareTripleChecker+Valid, 1326 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.6s IncrementalHoareTripleChecker+Time [2021-11-20 07:39:50,236 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1473 Valid, 4979 Invalid, 1991 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [663 Valid, 1326 Invalid, 2 Unknown, 0 Unchecked, 7.6s Time] [2021-11-20 07:39:50,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2839 states. [2021-11-20 07:39:50,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2839 to 2591. [2021-11-20 07:39:50,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2591 states, 1927 states have (on average 1.3642968344577062) internal successors, (2629), 1963 states have internal predecessors, (2629), 507 states have call successors, (507), 145 states have call predecessors, (507), 156 states have return successors, (561), 498 states have call predecessors, (561), 506 states have call successors, (561) [2021-11-20 07:39:50,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2591 states to 2591 states and 3697 transitions. [2021-11-20 07:39:50,409 INFO L78 Accepts]: Start accepts. Automaton has 2591 states and 3697 transitions. Word has length 63 [2021-11-20 07:39:50,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:39:50,410 INFO L470 AbstractCegarLoop]: Abstraction has 2591 states and 3697 transitions. [2021-11-20 07:39:50,411 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-20 07:39:50,411 INFO L276 IsEmpty]: Start isEmpty. Operand 2591 states and 3697 transitions. [2021-11-20 07:39:50,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-11-20 07:39:50,425 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:39:50,425 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:39:50,426 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 07:39:50,426 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:39:50,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:39:50,427 INFO L85 PathProgramCache]: Analyzing trace with hash -1080085425, now seen corresponding path program 1 times [2021-11-20 07:39:50,427 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:39:50,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1905801453] [2021-11-20 07:39:50,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:39:50,428 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:39:50,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:39:50,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:39:50,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:39:50,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:39:50,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-20 07:39:50,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:39:50,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-11-20 07:39:50,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:39:50,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:39:50,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2021-11-20 07:39:50,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 07:39:50,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:39:50,823 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-20 07:39:50,823 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:39:50,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1905801453] [2021-11-20 07:39:50,826 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1905801453] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:39:50,826 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:39:50,826 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 07:39:50,829 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599422123] [2021-11-20 07:39:50,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:39:50,830 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:39:50,830 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:39:50,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:39:50,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:39:50,832 INFO L87 Difference]: Start difference. First operand 2591 states and 3697 transitions. Second operand has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-20 07:39:53,094 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:39:55,113 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:39:57,134 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:39:59,930 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:01,955 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:03,984 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:07,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:07,462 INFO L93 Difference]: Finished difference Result 7632 states and 10965 transitions. [2021-11-20 07:40:07,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 07:40:07,463 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 113 [2021-11-20 07:40:07,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:07,507 INFO L225 Difference]: With dead ends: 7632 [2021-11-20 07:40:07,507 INFO L226 Difference]: Without dead ends: 5053 [2021-11-20 07:40:07,520 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:40:07,525 INFO L933 BasicCegarLoop]: 1033 mSDtfsCounter, 1308 mSDsluCounter, 2352 mSDsCounter, 0 mSdLazyCounter, 1323 mSolverCounterSat, 880 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1409 SdHoareTripleChecker+Valid, 3385 SdHoareTripleChecker+Invalid, 2209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 880 IncrementalHoareTripleChecker+Valid, 1323 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:07,527 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1409 Valid, 3385 Invalid, 2209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [880 Valid, 1323 Invalid, 6 Unknown, 0 Unchecked, 16.3s Time] [2021-11-20 07:40:07,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5053 states. [2021-11-20 07:40:07,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5053 to 4275. [2021-11-20 07:40:07,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4275 states, 3162 states have (on average 1.3488298545224542) internal successors, (4265), 3224 states have internal predecessors, (4265), 829 states have call successors, (829), 262 states have call predecessors, (829), 283 states have return successors, (918), 816 states have call predecessors, (918), 828 states have call successors, (918) [2021-11-20 07:40:07,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4275 states to 4275 states and 6012 transitions. [2021-11-20 07:40:07,886 INFO L78 Accepts]: Start accepts. Automaton has 4275 states and 6012 transitions. Word has length 113 [2021-11-20 07:40:07,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:07,889 INFO L470 AbstractCegarLoop]: Abstraction has 4275 states and 6012 transitions. [2021-11-20 07:40:07,889 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-20 07:40:07,889 INFO L276 IsEmpty]: Start isEmpty. Operand 4275 states and 6012 transitions. [2021-11-20 07:40:07,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2021-11-20 07:40:07,905 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:07,905 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:07,905 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 07:40:07,906 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:07,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:07,906 INFO L85 PathProgramCache]: Analyzing trace with hash 265725666, now seen corresponding path program 1 times [2021-11-20 07:40:07,907 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:07,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1835494949] [2021-11-20 07:40:07,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:07,907 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:07,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:08,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:08,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:08,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:40:08,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-20 07:40:08,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:08,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-11-20 07:40:08,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 07:40:08,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 07:40:08,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 07:40:08,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:08,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:08,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-20 07:40:08,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-11-20 07:40:08,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:08,268 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-11-20 07:40:08,268 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:08,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1835494949] [2021-11-20 07:40:08,269 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1835494949] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:08,269 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:08,269 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 07:40:08,269 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760398239] [2021-11-20 07:40:08,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:08,271 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:40:08,271 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:08,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:40:08,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:40:08,272 INFO L87 Difference]: Start difference. First operand 4275 states and 6012 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 07:40:10,432 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:12,463 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:14,895 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:16,923 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:20,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:20,286 INFO L93 Difference]: Finished difference Result 10577 states and 14962 transitions. [2021-11-20 07:40:20,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 07:40:20,287 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 130 [2021-11-20 07:40:20,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:20,340 INFO L225 Difference]: With dead ends: 10577 [2021-11-20 07:40:20,341 INFO L226 Difference]: Without dead ends: 6318 [2021-11-20 07:40:20,361 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:40:20,363 INFO L933 BasicCegarLoop]: 1215 mSDtfsCounter, 826 mSDsluCounter, 3157 mSDsCounter, 0 mSdLazyCounter, 1208 mSolverCounterSat, 417 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 891 SdHoareTripleChecker+Valid, 4372 SdHoareTripleChecker+Invalid, 1629 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 417 IncrementalHoareTripleChecker+Valid, 1208 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.7s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:20,364 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [891 Valid, 4372 Invalid, 1629 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [417 Valid, 1208 Invalid, 4 Unknown, 0 Unchecked, 11.7s Time] [2021-11-20 07:40:20,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6318 states. [2021-11-20 07:40:20,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6318 to 5704. [2021-11-20 07:40:20,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5704 states, 4250 states have (on average 1.3538823529411765) internal successors, (5754), 4336 states have internal predecessors, (5754), 1066 states have call successors, (1066), 358 states have call predecessors, (1066), 387 states have return successors, (1183), 1041 states have call predecessors, (1183), 1065 states have call successors, (1183) [2021-11-20 07:40:20,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5704 states to 5704 states and 8003 transitions. [2021-11-20 07:40:20,715 INFO L78 Accepts]: Start accepts. Automaton has 5704 states and 8003 transitions. Word has length 130 [2021-11-20 07:40:20,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:20,716 INFO L470 AbstractCegarLoop]: Abstraction has 5704 states and 8003 transitions. [2021-11-20 07:40:20,716 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 07:40:20,716 INFO L276 IsEmpty]: Start isEmpty. Operand 5704 states and 8003 transitions. [2021-11-20 07:40:20,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2021-11-20 07:40:20,730 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:20,730 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:20,731 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 07:40:20,731 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:20,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:20,732 INFO L85 PathProgramCache]: Analyzing trace with hash -1355234686, now seen corresponding path program 1 times [2021-11-20 07:40:20,732 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:20,733 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2054359122] [2021-11-20 07:40:20,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:20,734 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:20,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:20,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:20,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:20,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:20,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:20,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:20,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:40:21,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 07:40:21,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 07:40:21,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 07:40:21,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 07:40:21,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-20 07:40:21,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:21,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 07:40:21,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:21,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:21,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:21,294 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2021-11-20 07:40:21,294 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:21,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2054359122] [2021-11-20 07:40:21,295 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2054359122] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:21,295 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:21,295 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-20 07:40:21,295 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1885154001] [2021-11-20 07:40:21,296 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:21,298 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-20 07:40:21,299 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:21,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-20 07:40:21,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:40:21,300 INFO L87 Difference]: Start difference. First operand 5704 states and 8003 transitions. Second operand has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2021-11-20 07:40:23,499 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:25,521 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:28,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:28,391 INFO L93 Difference]: Finished difference Result 12348 states and 17757 transitions. [2021-11-20 07:40:28,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 07:40:28,392 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) Word has length 138 [2021-11-20 07:40:28,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:28,452 INFO L225 Difference]: With dead ends: 12348 [2021-11-20 07:40:28,452 INFO L226 Difference]: Without dead ends: 6671 [2021-11-20 07:40:28,480 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-11-20 07:40:28,481 INFO L933 BasicCegarLoop]: 900 mSDtfsCounter, 322 mSDsluCounter, 3517 mSDsCounter, 0 mSdLazyCounter, 1063 mSolverCounterSat, 348 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 4417 SdHoareTripleChecker+Invalid, 1413 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 348 IncrementalHoareTripleChecker+Valid, 1063 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.7s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:28,481 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [345 Valid, 4417 Invalid, 1413 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [348 Valid, 1063 Invalid, 2 Unknown, 0 Unchecked, 6.7s Time] [2021-11-20 07:40:28,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6671 states. [2021-11-20 07:40:28,843 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6671 to 5952. [2021-11-20 07:40:28,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5952 states, 4396 states have (on average 1.3475887170154686) internal successors, (5924), 4500 states have internal predecessors, (5924), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 413 states have return successors, (1329), 1125 states have call predecessors, (1329), 1141 states have call successors, (1329) [2021-11-20 07:40:28,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5952 states to 5952 states and 8395 transitions. [2021-11-20 07:40:28,894 INFO L78 Accepts]: Start accepts. Automaton has 5952 states and 8395 transitions. Word has length 138 [2021-11-20 07:40:28,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:28,894 INFO L470 AbstractCegarLoop]: Abstraction has 5952 states and 8395 transitions. [2021-11-20 07:40:28,895 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2021-11-20 07:40:28,896 INFO L276 IsEmpty]: Start isEmpty. Operand 5952 states and 8395 transitions. [2021-11-20 07:40:28,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 146 [2021-11-20 07:40:28,910 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:28,911 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:28,911 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 07:40:28,911 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:28,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:28,913 INFO L85 PathProgramCache]: Analyzing trace with hash 324022734, now seen corresponding path program 1 times [2021-11-20 07:40:28,913 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:28,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223521506] [2021-11-20 07:40:28,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:28,914 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:29,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:29,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:29,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:29,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:40:29,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 07:40:29,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 07:40:29,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 07:40:29,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 07:40:29,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-20 07:40:29,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:29,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 07:40:29,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:29,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:29,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:40:29,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:29,423 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-11-20 07:40:29,423 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:29,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223521506] [2021-11-20 07:40:29,424 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223521506] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:29,424 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:29,424 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-11-20 07:40:29,424 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1382613215] [2021-11-20 07:40:29,425 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:29,425 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-20 07:40:29,425 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:29,426 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-20 07:40:29,426 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2021-11-20 07:40:29,426 INFO L87 Difference]: Start difference. First operand 5952 states and 8395 transitions. Second operand has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 07:40:31,583 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:34,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:34,314 INFO L93 Difference]: Finished difference Result 12600 states and 17885 transitions. [2021-11-20 07:40:34,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-20 07:40:34,315 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 145 [2021-11-20 07:40:34,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:34,363 INFO L225 Difference]: With dead ends: 12600 [2021-11-20 07:40:34,364 INFO L226 Difference]: Without dead ends: 6675 [2021-11-20 07:40:34,386 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2021-11-20 07:40:34,387 INFO L933 BasicCegarLoop]: 896 mSDtfsCounter, 429 mSDsluCounter, 5104 mSDsCounter, 0 mSdLazyCounter, 1331 mSolverCounterSat, 503 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 452 SdHoareTripleChecker+Valid, 6000 SdHoareTripleChecker+Invalid, 1835 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 503 IncrementalHoareTripleChecker+Valid, 1331 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:34,387 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [452 Valid, 6000 Invalid, 1835 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [503 Valid, 1331 Invalid, 1 Unknown, 0 Unchecked, 4.6s Time] [2021-11-20 07:40:34,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6675 states. [2021-11-20 07:40:34,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6675 to 6000. [2021-11-20 07:40:34,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6000 states, 4432 states have (on average 1.3447653429602888) internal successors, (5960), 4532 states have internal predecessors, (5960), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 425 states have return successors, (1375), 1141 states have call predecessors, (1375), 1141 states have call successors, (1375) [2021-11-20 07:40:34,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6000 states to 6000 states and 8477 transitions. [2021-11-20 07:40:34,722 INFO L78 Accepts]: Start accepts. Automaton has 6000 states and 8477 transitions. Word has length 145 [2021-11-20 07:40:34,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:34,723 INFO L470 AbstractCegarLoop]: Abstraction has 6000 states and 8477 transitions. [2021-11-20 07:40:34,724 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 07:40:34,724 INFO L276 IsEmpty]: Start isEmpty. Operand 6000 states and 8477 transitions. [2021-11-20 07:40:34,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-11-20 07:40:34,742 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:34,742 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:34,742 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 07:40:34,743 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:34,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:34,743 INFO L85 PathProgramCache]: Analyzing trace with hash -1003509590, now seen corresponding path program 1 times [2021-11-20 07:40:34,743 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:34,743 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [462338312] [2021-11-20 07:40:34,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:34,744 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:35,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:35,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:35,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:35,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:40:35,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 07:40:35,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 07:40:35,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 07:40:35,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 07:40:35,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-20 07:40:35,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:35,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:35,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-20 07:40:35,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:35,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:35,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:40:35,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:35,410 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-20 07:40:35,410 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:35,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [462338312] [2021-11-20 07:40:35,411 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [462338312] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:35,411 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:35,411 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 07:40:35,411 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [825217024] [2021-11-20 07:40:35,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:35,412 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 07:40:35,412 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:35,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 07:40:35,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:40:35,413 INFO L87 Difference]: Start difference. First operand 6000 states and 8477 transitions. Second operand has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-20 07:40:37,622 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:39,650 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:41,679 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:44,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:44,627 INFO L93 Difference]: Finished difference Result 12649 states and 17960 transitions. [2021-11-20 07:40:44,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:40:44,628 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 151 [2021-11-20 07:40:44,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:44,667 INFO L225 Difference]: With dead ends: 12649 [2021-11-20 07:40:44,667 INFO L226 Difference]: Without dead ends: 6657 [2021-11-20 07:40:44,732 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:40:44,733 INFO L933 BasicCegarLoop]: 899 mSDtfsCounter, 434 mSDsluCounter, 3091 mSDsCounter, 0 mSdLazyCounter, 1111 mSolverCounterSat, 508 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 3990 SdHoareTripleChecker+Invalid, 1622 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 508 IncrementalHoareTripleChecker+Valid, 1111 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.9s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:44,733 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [457 Valid, 3990 Invalid, 1622 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [508 Valid, 1111 Invalid, 3 Unknown, 0 Unchecked, 8.9s Time] [2021-11-20 07:40:44,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6657 states. [2021-11-20 07:40:44,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6657 to 6009. [2021-11-20 07:40:44,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6009 states, 4441 states have (on average 1.3440666516550326) internal successors, (5969), 4541 states have internal predecessors, (5969), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 425 states have return successors, (1375), 1141 states have call predecessors, (1375), 1141 states have call successors, (1375) [2021-11-20 07:40:45,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6009 states to 6009 states and 8486 transitions. [2021-11-20 07:40:45,008 INFO L78 Accepts]: Start accepts. Automaton has 6009 states and 8486 transitions. Word has length 151 [2021-11-20 07:40:45,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:45,009 INFO L470 AbstractCegarLoop]: Abstraction has 6009 states and 8486 transitions. [2021-11-20 07:40:45,009 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-20 07:40:45,009 INFO L276 IsEmpty]: Start isEmpty. Operand 6009 states and 8486 transitions. [2021-11-20 07:40:45,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2021-11-20 07:40:45,025 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:45,026 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:45,026 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 07:40:45,026 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:45,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:45,027 INFO L85 PathProgramCache]: Analyzing trace with hash -671508138, now seen corresponding path program 1 times [2021-11-20 07:40:45,027 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:45,027 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [288870809] [2021-11-20 07:40:45,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:45,027 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:45,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:45,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:45,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:45,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:40:45,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-20 07:40:45,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-20 07:40:45,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 07:40:45,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-20 07:40:45,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-11-20 07:40:45,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:45,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:45,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-20 07:40:45,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:45,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:45,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:40:45,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:45,619 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-20 07:40:45,619 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:45,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [288870809] [2021-11-20 07:40:45,620 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [288870809] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:40:45,620 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [174963280] [2021-11-20 07:40:45,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:45,620 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:40:45,620 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:40:45,622 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:40:45,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 07:40:46,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:46,182 INFO L263 TraceCheckSpWp]: Trace formula consists of 2021 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-20 07:40:46,199 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:40:46,611 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2021-11-20 07:40:46,611 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 07:40:46,611 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [174963280] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:46,612 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 07:40:46,612 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2021-11-20 07:40:46,612 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2126862287] [2021-11-20 07:40:46,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:46,612 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:40:46,613 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:46,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:40:46,613 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2021-11-20 07:40:46,613 INFO L87 Difference]: Start difference. First operand 6009 states and 8486 transitions. Second operand has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-20 07:40:46,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:46,845 INFO L93 Difference]: Finished difference Result 9166 states and 12912 transitions. [2021-11-20 07:40:46,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:40:46,846 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 152 [2021-11-20 07:40:46,846 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:46,863 INFO L225 Difference]: With dead ends: 9166 [2021-11-20 07:40:46,863 INFO L226 Difference]: Without dead ends: 3175 [2021-11-20 07:40:46,877 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 175 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=35, Invalid=147, Unknown=0, NotChecked=0, Total=182 [2021-11-20 07:40:46,878 INFO L933 BasicCegarLoop]: 942 mSDtfsCounter, 24 mSDsluCounter, 2816 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 3758 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:46,878 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [24 Valid, 3758 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:40:46,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3175 states. [2021-11-20 07:40:47,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3175 to 3079. [2021-11-20 07:40:47,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3422553751645458) internal successors, (3059), 2329 states have internal predecessors, (3059), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2021-11-20 07:40:47,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4331 transitions. [2021-11-20 07:40:47,070 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4331 transitions. Word has length 152 [2021-11-20 07:40:47,070 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:47,070 INFO L470 AbstractCegarLoop]: Abstraction has 3079 states and 4331 transitions. [2021-11-20 07:40:47,071 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-20 07:40:47,071 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4331 transitions. [2021-11-20 07:40:47,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2021-11-20 07:40:47,081 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:47,082 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:47,120 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 07:40:47,308 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:40:47,309 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:47,309 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:47,309 INFO L85 PathProgramCache]: Analyzing trace with hash -1205243631, now seen corresponding path program 1 times [2021-11-20 07:40:47,309 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:47,309 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [175375679] [2021-11-20 07:40:47,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:47,309 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:47,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:47,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:47,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:47,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:40:47,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-20 07:40:47,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-20 07:40:47,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-11-20 07:40:47,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-20 07:40:47,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-11-20 07:40:47,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-20 07:40:47,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:47,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:47,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-20 07:40:47,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:47,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:47,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:40:47,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:47,912 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2021-11-20 07:40:47,912 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:47,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [175375679] [2021-11-20 07:40:47,913 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [175375679] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:40:47,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [57876406] [2021-11-20 07:40:47,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:47,913 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:40:47,913 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:40:47,917 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:40:47,943 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 07:40:48,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:48,879 INFO L263 TraceCheckSpWp]: Trace formula consists of 2051 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 07:40:48,886 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:40:49,387 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 1 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2021-11-20 07:40:49,387 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:40:49,911 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2021-11-20 07:40:49,911 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [57876406] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:40:49,911 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:40:49,911 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2021-11-20 07:40:49,912 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [946316384] [2021-11-20 07:40:49,912 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:40:49,913 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-20 07:40:49,913 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:49,914 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-20 07:40:49,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2021-11-20 07:40:49,915 INFO L87 Difference]: Start difference. First operand 3079 states and 4331 transitions. Second operand has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-20 07:40:52,381 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:54,407 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:40:57,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:57,859 INFO L93 Difference]: Finished difference Result 6479 states and 9163 transitions. [2021-11-20 07:40:57,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-20 07:40:57,860 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 158 [2021-11-20 07:40:57,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:57,874 INFO L225 Difference]: With dead ends: 6479 [2021-11-20 07:40:57,874 INFO L226 Difference]: Without dead ends: 3415 [2021-11-20 07:40:57,881 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 360 GetRequests, 337 SyntacticMatches, 1 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=149, Invalid=403, Unknown=0, NotChecked=0, Total=552 [2021-11-20 07:40:57,883 INFO L933 BasicCegarLoop]: 922 mSDtfsCounter, 443 mSDsluCounter, 4400 mSDsCounter, 0 mSdLazyCounter, 1209 mSolverCounterSat, 496 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 466 SdHoareTripleChecker+Valid, 5322 SdHoareTripleChecker+Invalid, 1707 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 496 IncrementalHoareTripleChecker+Valid, 1209 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:57,884 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [466 Valid, 5322 Invalid, 1707 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [496 Valid, 1209 Invalid, 2 Unknown, 0 Unchecked, 7.4s Time] [2021-11-20 07:40:57,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3415 states. [2021-11-20 07:40:58,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3415 to 3086. [2021-11-20 07:40:58,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3086 states, 2286 states have (on average 1.3412073490813647) internal successors, (3066), 2336 states have internal predecessors, (3066), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2021-11-20 07:40:58,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3086 states to 3086 states and 4338 transitions. [2021-11-20 07:40:58,020 INFO L78 Accepts]: Start accepts. Automaton has 3086 states and 4338 transitions. Word has length 158 [2021-11-20 07:40:58,020 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:58,022 INFO L470 AbstractCegarLoop]: Abstraction has 3086 states and 4338 transitions. [2021-11-20 07:40:58,022 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-20 07:40:58,022 INFO L276 IsEmpty]: Start isEmpty. Operand 3086 states and 4338 transitions. [2021-11-20 07:40:58,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-11-20 07:40:58,033 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:58,033 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:58,078 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 07:40:58,252 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:40:58,253 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:58,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:58,253 INFO L85 PathProgramCache]: Analyzing trace with hash -2144584603, now seen corresponding path program 2 times [2021-11-20 07:40:58,253 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:58,253 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076383925] [2021-11-20 07:40:58,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:58,253 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:58,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:58,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:58,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:58,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:40:58,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-11-20 07:40:58,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 07:40:58,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 07:40:58,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 07:40:58,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-20 07:40:58,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-11-20 07:40:58,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:58,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:58,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:58,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 07:40:58,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:59,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:59,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:59,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:59,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:59,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:40:59,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:59,443 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 88 trivial. 0 not checked. [2021-11-20 07:40:59,443 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:59,443 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076383925] [2021-11-20 07:40:59,443 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076383925] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:59,443 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:59,443 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2021-11-20 07:40:59,443 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1316413894] [2021-11-20 07:40:59,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:59,444 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-11-20 07:40:59,444 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:59,445 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-11-20 07:40:59,445 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2021-11-20 07:40:59,445 INFO L87 Difference]: Start difference. First operand 3086 states and 4338 transitions. Second operand has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 07:41:01,896 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:03,936 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:08,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:41:08,727 INFO L93 Difference]: Finished difference Result 6457 states and 9221 transitions. [2021-11-20 07:41:08,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-11-20 07:41:08,728 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2021-11-20 07:41:08,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:41:08,742 INFO L225 Difference]: With dead ends: 6457 [2021-11-20 07:41:08,743 INFO L226 Difference]: Without dead ends: 3417 [2021-11-20 07:41:08,751 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2021-11-20 07:41:08,752 INFO L933 BasicCegarLoop]: 928 mSDtfsCounter, 442 mSDsluCounter, 11203 mSDsCounter, 0 mSdLazyCounter, 2510 mSolverCounterSat, 482 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 465 SdHoareTripleChecker+Valid, 12131 SdHoareTripleChecker+Invalid, 2994 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 482 IncrementalHoareTripleChecker+Valid, 2510 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.9s IncrementalHoareTripleChecker+Time [2021-11-20 07:41:08,753 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [465 Valid, 12131 Invalid, 2994 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [482 Valid, 2510 Invalid, 2 Unknown, 0 Unchecked, 8.9s Time] [2021-11-20 07:41:08,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2021-11-20 07:41:08,871 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3098. [2021-11-20 07:41:08,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3098 states, 2297 states have (on average 1.3369612538093165) internal successors, (3071), 2342 states have internal predecessors, (3071), 578 states have call successors, (578), 188 states have call predecessors, (578), 222 states have return successors, (698), 583 states have call predecessors, (698), 577 states have call successors, (698) [2021-11-20 07:41:08,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3098 states to 3098 states and 4347 transitions. [2021-11-20 07:41:08,886 INFO L78 Accepts]: Start accepts. Automaton has 3098 states and 4347 transitions. Word has length 161 [2021-11-20 07:41:08,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:41:08,887 INFO L470 AbstractCegarLoop]: Abstraction has 3098 states and 4347 transitions. [2021-11-20 07:41:08,887 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 07:41:08,887 INFO L276 IsEmpty]: Start isEmpty. Operand 3098 states and 4347 transitions. [2021-11-20 07:41:08,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2021-11-20 07:41:08,898 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:41:08,898 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:41:08,899 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-20 07:41:08,899 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:41:08,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:41:08,899 INFO L85 PathProgramCache]: Analyzing trace with hash -1162446187, now seen corresponding path program 1 times [2021-11-20 07:41:08,900 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:41:08,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1978266613] [2021-11-20 07:41:08,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:41:08,900 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:41:09,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:41:09,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:41:09,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:41:09,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:41:09,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-11-20 07:41:09,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 07:41:09,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 07:41:09,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 07:41:09,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-20 07:41:09,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-11-20 07:41:09,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:41:09,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 07:41:09,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:41:09,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 07:41:09,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:41:09,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:41:09,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:41:09,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:09,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:41:09,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:10,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:41:10,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:10,249 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-20 07:41:10,249 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:41:10,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1978266613] [2021-11-20 07:41:10,250 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1978266613] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:41:10,250 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:41:10,250 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2021-11-20 07:41:10,250 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2045195509] [2021-11-20 07:41:10,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:41:10,251 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-11-20 07:41:10,251 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:41:10,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-11-20 07:41:10,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2021-11-20 07:41:10,252 INFO L87 Difference]: Start difference. First operand 3098 states and 4347 transitions. Second operand has 19 states, 18 states have (on average 6.055555555555555) internal successors, (109), 11 states have internal predecessors, (109), 3 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 07:41:12,758 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:14,793 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:19,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:41:19,180 INFO L93 Difference]: Finished difference Result 6469 states and 9216 transitions. [2021-11-20 07:41:19,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-11-20 07:41:19,181 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 6.055555555555555) internal successors, (109), 11 states have internal predecessors, (109), 3 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) Word has length 170 [2021-11-20 07:41:19,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:41:19,196 INFO L225 Difference]: With dead ends: 6469 [2021-11-20 07:41:19,196 INFO L226 Difference]: Without dead ends: 3417 [2021-11-20 07:41:19,204 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 38 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2021-11-20 07:41:19,205 INFO L933 BasicCegarLoop]: 923 mSDtfsCounter, 551 mSDsluCounter, 11139 mSDsCounter, 0 mSdLazyCounter, 2505 mSolverCounterSat, 632 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 574 SdHoareTripleChecker+Valid, 12062 SdHoareTripleChecker+Invalid, 3139 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 632 IncrementalHoareTripleChecker+Valid, 2505 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2021-11-20 07:41:19,205 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [574 Valid, 12062 Invalid, 3139 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [632 Valid, 2505 Invalid, 2 Unknown, 0 Unchecked, 8.5s Time] [2021-11-20 07:41:19,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2021-11-20 07:41:19,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3109. [2021-11-20 07:41:19,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3109 states, 2306 states have (on average 1.3343451864700782) internal successors, (3077), 2349 states have internal predecessors, (3077), 578 states have call successors, (578), 188 states have call predecessors, (578), 224 states have return successors, (701), 587 states have call predecessors, (701), 577 states have call successors, (701) [2021-11-20 07:41:19,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3109 states to 3109 states and 4356 transitions. [2021-11-20 07:41:19,354 INFO L78 Accepts]: Start accepts. Automaton has 3109 states and 4356 transitions. Word has length 170 [2021-11-20 07:41:19,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:41:19,355 INFO L470 AbstractCegarLoop]: Abstraction has 3109 states and 4356 transitions. [2021-11-20 07:41:19,355 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 6.055555555555555) internal successors, (109), 11 states have internal predecessors, (109), 3 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 07:41:19,355 INFO L276 IsEmpty]: Start isEmpty. Operand 3109 states and 4356 transitions. [2021-11-20 07:41:19,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-11-20 07:41:19,366 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:41:19,366 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:41:19,366 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 07:41:19,367 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:41:19,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:41:19,367 INFO L85 PathProgramCache]: Analyzing trace with hash -1475945336, now seen corresponding path program 1 times [2021-11-20 07:41:19,367 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:41:19,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [24677323] [2021-11-20 07:41:19,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:41:19,368 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:41:19,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:41:19,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:41:19,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:41:19,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:41:19,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-11-20 07:41:19,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 07:41:19,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 07:41:19,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 07:41:19,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-20 07:41:19,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-11-20 07:41:19,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:41:19,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-11-20 07:41:19,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 07:41:19,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 07:41:19,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 07:41:19,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:41:19,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:41:19,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:41:19,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:41:19,753 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-11-20 07:41:19,753 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:41:19,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [24677323] [2021-11-20 07:41:19,753 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [24677323] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:41:19,754 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:41:19,754 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:41:19,754 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1089606610] [2021-11-20 07:41:19,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:41:19,755 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:41:19,755 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:41:19,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:41:19,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:41:19,756 INFO L87 Difference]: Start difference. First operand 3109 states and 4356 transitions. Second operand has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-11-20 07:41:21,942 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:23,980 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:26,015 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:29,487 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:31,530 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:33,564 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:41:35,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:41:35,659 INFO L93 Difference]: Finished difference Result 7313 states and 10263 transitions. [2021-11-20 07:41:35,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:41:35,660 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 172 [2021-11-20 07:41:35,660 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:41:35,682 INFO L225 Difference]: With dead ends: 7313 [2021-11-20 07:41:35,683 INFO L226 Difference]: Without dead ends: 4250 [2021-11-20 07:41:35,691 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:41:35,692 INFO L933 BasicCegarLoop]: 1067 mSDtfsCounter, 819 mSDsluCounter, 2213 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 268 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 906 SdHoareTripleChecker+Valid, 3280 SdHoareTripleChecker+Invalid, 1523 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 268 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.7s IncrementalHoareTripleChecker+Time [2021-11-20 07:41:35,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [906 Valid, 3280 Invalid, 1523 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [268 Valid, 1249 Invalid, 6 Unknown, 0 Unchecked, 15.7s Time] [2021-11-20 07:41:35,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4250 states. [2021-11-20 07:41:35,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4250 to 3968. [2021-11-20 07:41:35,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3968 states, 2966 states have (on average 1.3354686446392448) internal successors, (3961), 3018 states have internal predecessors, (3961), 704 states have call successors, (704), 248 states have call predecessors, (704), 297 states have return successors, (864), 719 states have call predecessors, (864), 703 states have call successors, (864) [2021-11-20 07:41:35,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3968 states to 3968 states and 5529 transitions. [2021-11-20 07:41:35,885 INFO L78 Accepts]: Start accepts. Automaton has 3968 states and 5529 transitions. Word has length 172 [2021-11-20 07:41:35,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:41:35,886 INFO L470 AbstractCegarLoop]: Abstraction has 3968 states and 5529 transitions. [2021-11-20 07:41:35,886 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-11-20 07:41:35,886 INFO L276 IsEmpty]: Start isEmpty. Operand 3968 states and 5529 transitions. [2021-11-20 07:41:35,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2021-11-20 07:41:35,900 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:41:35,900 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:41:35,900 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-11-20 07:41:35,900 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:41:35,901 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:41:35,901 INFO L85 PathProgramCache]: Analyzing trace with hash -1723005698, now seen corresponding path program 1 times [2021-11-20 07:41:35,901 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:41:35,901 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1876257652] [2021-11-20 07:41:35,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:41:35,902 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:41:46,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 07:41:46,164 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-20 07:41:46,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 07:41:46,723 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-20 07:41:46,723 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-20 07:41:46,724 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 07:41:46,726 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-11-20 07:41:46,729 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:41:46,733 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 07:41:46,798 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-20 07:41:46,829 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,829 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,830 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,830 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,831 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,831 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,831 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,831 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,832 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:46,832 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-20 07:41:47,100 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 07:41:47 BoogieIcfgContainer [2021-11-20 07:41:47,100 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 07:41:47,101 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 07:41:47,101 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 07:41:47,101 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 07:41:47,102 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:39:33" (3/4) ... [2021-11-20 07:41:47,105 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-20 07:41:47,105 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 07:41:47,106 INFO L158 Benchmark]: Toolchain (without parser) took 141696.32ms. Allocated memory was 113.2MB in the beginning and 799.0MB in the end (delta: 685.8MB). Free memory was 72.5MB in the beginning and 457.5MB in the end (delta: -385.0MB). Peak memory consumption was 300.2MB. Max. memory is 16.1GB. [2021-11-20 07:41:47,107 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 113.2MB. Free memory is still 69.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:41:47,108 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2273.87ms. Allocated memory was 113.2MB in the beginning and 192.9MB in the end (delta: 79.7MB). Free memory was 72.2MB in the beginning and 90.7MB in the end (delta: -18.5MB). Peak memory consumption was 61.0MB. Max. memory is 16.1GB. [2021-11-20 07:41:47,109 INFO L158 Benchmark]: Boogie Procedure Inliner took 258.54ms. Allocated memory is still 192.9MB. Free memory was 90.7MB in the beginning and 123.1MB in the end (delta: -32.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-11-20 07:41:47,109 INFO L158 Benchmark]: Boogie Preprocessor took 209.09ms. Allocated memory is still 192.9MB. Free memory was 123.1MB in the beginning and 108.3MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-11-20 07:41:47,110 INFO L158 Benchmark]: RCFGBuilder took 4864.81ms. Allocated memory was 192.9MB in the beginning and 318.8MB in the end (delta: 125.8MB). Free memory was 107.3MB in the beginning and 208.3MB in the end (delta: -100.9MB). Peak memory consumption was 97.2MB. Max. memory is 16.1GB. [2021-11-20 07:41:47,110 INFO L158 Benchmark]: TraceAbstraction took 134077.14ms. Allocated memory was 318.8MB in the beginning and 799.0MB in the end (delta: 480.2MB). Free memory was 208.3MB in the beginning and 457.5MB in the end (delta: -249.2MB). Peak memory consumption was 550.8MB. Max. memory is 16.1GB. [2021-11-20 07:41:47,110 INFO L158 Benchmark]: Witness Printer took 4.41ms. Allocated memory is still 799.0MB. Free memory is still 457.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:41:47,113 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 113.2MB. Free memory is still 69.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2273.87ms. Allocated memory was 113.2MB in the beginning and 192.9MB in the end (delta: 79.7MB). Free memory was 72.2MB in the beginning and 90.7MB in the end (delta: -18.5MB). Peak memory consumption was 61.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 258.54ms. Allocated memory is still 192.9MB. Free memory was 90.7MB in the beginning and 123.1MB in the end (delta: -32.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 209.09ms. Allocated memory is still 192.9MB. Free memory was 123.1MB in the beginning and 108.3MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * RCFGBuilder took 4864.81ms. Allocated memory was 192.9MB in the beginning and 318.8MB in the end (delta: 125.8MB). Free memory was 107.3MB in the beginning and 208.3MB in the end (delta: -100.9MB). Peak memory consumption was 97.2MB. Max. memory is 16.1GB. * TraceAbstraction took 134077.14ms. Allocated memory was 318.8MB in the beginning and 799.0MB in the end (delta: 480.2MB). Free memory was 208.3MB in the beginning and 457.5MB in the end (delta: -249.2MB). Peak memory consumption was 550.8MB. Max. memory is 16.1GB. * Witness Printer took 4.41ms. Allocated memory is still 799.0MB. Free memory is still 457.5MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7323]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8887, overapproximation of bitwiseAnd at line 8897. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=11, ldvarg3={181:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=4, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=11, ldvarg3={181:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={181:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={181:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={167:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={181:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={183:0}, descriptor.flags=0, descriptor___0={182:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=-2, \result=-2, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, c=0, exp=-2, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={183:0}, descriptor.flags=0, descriptor___0={182:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND TRUE tmp != 0L [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, sem={163:0}, sem={163:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=1560, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, ldv_func_arg1={165:0}, ldv_func_arg1={165:0}, ldv_func_arg2={4294967353:4294967322}, ldv_func_arg2={4294967353:4294967322}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, descriptor={183:0}, descriptor___0={182:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=-2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=-3, \result=-3, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, c=0, exp=-3, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, descriptor={183:0}, descriptor___0={182:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=-2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND TRUE tmp___0 != 0L [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=-2, tmp___0=-3, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=6864, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=232, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9022] COND TRUE ldv_state_variable_1 == 1 [L9023] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8796] int ret ; [L8797] struct usb_card_rec *card ; [L8799] EXPR adapter->card [L8799] card = (struct usb_card_rec *)adapter->card [L8800] EXPR card->usb_boot_state VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->usb_boot_state=169, fw={0:0}, fw={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8800] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8812] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8393] struct usb_card_rec *card ; [L8394] int i ; [L8395] int tmp ; [L8396] int tmp___0 ; [L8398] EXPR adapter->card [L8398] card = (struct usb_card_rec *)adapter->card [L8399] card->rx_cmd.adapter = adapter [L8400] EXPR card->rx_cmd_ep [L8400] card->rx_cmd.ep = card->rx_cmd_ep [L8401] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7271] void *p ; [L7272] void *tmp ; [L7273] int tmp___0 ; [L7275] tmp___0 = __VERIFIER_nondet_int() [L7276] COND FALSE !(tmp___0 != 0) [L7279] tmp = malloc(size) [L7280] p = tmp VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7282] return (p); VAL [\old(size)=184, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, arg0=0, arg1=208, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] return ldv_malloc(sizeof(struct urb)); [L8401] RET, EXPR usb_alloc_urb(0, 208U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_alloc_urb(0, 208U)={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8401] card->rx_cmd.urb = usb_alloc_urb(0, 208U) [L8402] EXPR card->rx_cmd.urb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.urb={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8402] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8407] CALL, EXPR ldv_dev_alloc_skb_14(2048U) VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND FALSE !(tmp___0 != 0) [L7296] EXPR, FCALL calloc(1UL, size) [L7296] tmp = calloc(1UL, size) [L7297] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7299] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551617:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551617:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND FALSE !(! skb) [L9387] CALL ldv_set_add(LDV_SKBS, skb) [L9255] int i ; [L9257] i = 0 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9258] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9259] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9269] COND TRUE last_index < 15 [L9270] set_impl[last_index] = e [L9271] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9387] RET ldv_set_add(LDV_SKBS, skb) [L9388] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551617:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={-18446744073709551617:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=0, \old(length)=2048, \result={-18446744073709551617:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={-18446744073709551617:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] RET, EXPR ldv_dev_alloc_skb_14(2048U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, ldv_dev_alloc_skb_14(2048U)={-18446744073709551617:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] card->rx_cmd.skb = ldv_dev_alloc_skb_14(2048U) [L8408] EXPR card->rx_cmd.skb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.skb={-18446744073709551617:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8408] COND FALSE !((unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0)) [L8413] CALL, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7841] struct mwifiex_adapter *adapter ; [L7842] struct usb_card_rec *card ; [L7843] unsigned int tmp ; [L7844] int tmp___0 ; [L7846] EXPR ctx->adapter [L7846] adapter = ctx->adapter [L7847] EXPR adapter->card [L7847] card = (struct usb_card_rec *)adapter->card [L7848] EXPR card->rx_cmd_ep [L7848] EXPR ctx->ep VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={-18446744073709551617:0}, add_remove_card_sem={163:0}, card={4294967354:-29}, card->rx_cmd_ep=170, ctx={167:0}, ctx={167:0}, ctx->ep=171, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7848] COND TRUE (int )card->rx_cmd_ep != (int )ctx->ep [L7849] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND TRUE ! skb [L9385] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=1, \old(length)=2048, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={-18446744073709551617:0}, add_remove_card_sem={163:0}, card={4294967354:-29}, ctx={167:0}, ctx={167:0}, last_index=1, ldv_dev_alloc_skb_14((unsigned int )size)={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] ctx->skb = ldv_dev_alloc_skb_14((unsigned int )size) [L7850] EXPR ctx->skb VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={-18446744073709551617:0}, add_remove_card_sem={163:0}, card={4294967354:-29}, ctx={167:0}, ctx={167:0}, ctx->skb={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7850] COND TRUE (unsigned long )ctx->skb == (unsigned long )((struct sk_buff *)0) [L7851] adapter->dev [L7853] return (-12); VAL [\old(last_index)=1, \old(size)=2048, \result=-12, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={-18446744073709551617:0}, add_remove_card_sem={163:0}, card={4294967354:-29}, ctx={167:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] RET, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048)=-12, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] tmp = mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) [L8414] COND TRUE tmp != 0 [L8415] return (-1); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=-12, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8812] RET, EXPR mwifiex_usb_rx_init(adapter) [L8812] ret = mwifiex_usb_rx_init(adapter) [L8813] COND FALSE !(ret == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8817] return (ret); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9023] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L9024] ldv_state_variable_1 = 1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9061] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L9062] CALL mwifiex_usb_cleanup_module() [L8908] int tmp ; [L8910] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9477] return __VERIFIER_nondet_int(); [L8910] RET, EXPR down_interruptible(& add_remove_card_sem) [L8910] tmp = down_interruptible(& add_remove_card_sem) [L8911] COND FALSE !(tmp == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8915] user_rmmod = 1U [L8916] CALL ldv_usb_deregister_18(& mwifiex_usb_driver) [L9235] FCALL usb_deregister(arg) [L9236] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, arg={165:0}, arg={165:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L8916] RET ldv_usb_deregister_18(& mwifiex_usb_driver) [L9062] RET mwifiex_usb_cleanup_module() [L9063] ldv_state_variable_0 = 2 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={181:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9164] CALL ldv_check_final_state() [L9446] int tmp___7 ; [L9448] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L9337] return (last_index == 0); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9448] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L9448] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L9449] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp___7=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9451] CALL ldv_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L7323] reach_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967353:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 679 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 133.6s, OverallIterations: 13, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 108.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 32 mSolverCounterUnknown, 8955 SdHoareTripleChecker+Valid, 103.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8349 mSDsluCounter, 66520 SdHoareTripleChecker+Invalid, 98.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 54657 mSDsCounter, 5887 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15815 IncrementalHoareTripleChecker+Invalid, 21734 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5887 mSolverCounterUnsat, 11863 mSDtfsCounter, 15815 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 920 GetRequests, 771 SyntacticMatches, 1 SemanticMatches, 148 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 238 ImplicationChecksByTransitivity, 2.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=6009occurred in iteration=7, InterpolantAutomatonStates: 123, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.9s AutomataMinimizationTime, 12 MinimizatonAttempts, 5162 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 12.9s SatisfiabilityAnalysisTime, 7.1s InterpolantComputationTime, 2094 NumberOfCodeBlocks, 2094 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 2051 ConstructedInterpolants, 0 QuantifiedInterpolants, 4294 SizeOfPredicates, 7 NumberOfNonLiveVariables, 4072 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 1238/1242 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-20 07:41:47,288 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 07:41:49,778 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 07:41:49,781 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 07:41:49,820 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 07:41:49,821 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 07:41:49,825 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 07:41:49,829 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 07:41:49,837 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 07:41:49,841 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 07:41:49,847 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 07:41:49,848 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 07:41:49,850 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 07:41:49,851 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 07:41:49,854 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 07:41:49,857 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 07:41:49,859 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 07:41:49,861 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 07:41:49,862 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 07:41:49,867 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 07:41:49,875 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 07:41:49,877 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 07:41:49,879 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 07:41:49,881 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 07:41:49,883 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 07:41:49,892 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 07:41:49,893 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 07:41:49,893 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 07:41:49,895 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 07:41:49,896 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 07:41:49,897 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 07:41:49,899 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 07:41:49,901 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 07:41:49,904 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 07:41:49,905 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 07:41:49,907 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 07:41:49,907 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 07:41:49,908 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 07:41:49,908 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 07:41:49,929 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 07:41:49,931 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 07:41:49,932 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 07:41:49,933 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-20 07:41:49,984 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 07:41:49,984 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 07:41:49,985 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 07:41:49,986 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 07:41:49,987 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 07:41:49,987 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 07:41:49,989 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 07:41:49,989 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 07:41:49,989 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 07:41:49,990 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 07:41:49,991 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 07:41:49,991 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 07:41:49,991 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 07:41:49,992 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 07:41:49,992 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-11-20 07:41:49,992 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-20 07:41:49,993 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-20 07:41:49,993 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 07:41:49,993 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 07:41:49,993 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 07:41:49,994 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 07:41:49,994 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 07:41:49,994 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 07:41:49,995 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:41:49,995 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 07:41:49,995 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 07:41:49,996 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 07:41:49,996 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-20 07:41:49,996 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-20 07:41:49,997 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 07:41:49,997 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 07:41:49,997 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 07:41:49,998 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 07:41:49,998 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-20 07:41:49,998 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2021-11-20 07:41:50,439 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 07:41:50,480 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 07:41:50,481 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 07:41:50,482 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 07:41:50,483 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 07:41:50,484 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 07:41:50,564 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/51bc3263c/554087e1ca1743a687f606e4dca55fdb/FLAGb09c1b613 [2021-11-20 07:41:51,645 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 07:41:51,646 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 07:41:51,698 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/51bc3263c/554087e1ca1743a687f606e4dca55fdb/FLAGb09c1b613 [2021-11-20 07:41:52,027 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/data/51bc3263c/554087e1ca1743a687f606e4dca55fdb [2021-11-20 07:41:52,030 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 07:41:52,031 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 07:41:52,033 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 07:41:52,033 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 07:41:52,038 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 07:41:52,039 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:41:52" (1/1) ... [2021-11-20 07:41:52,040 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@21187df5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:52, skipping insertion in model container [2021-11-20 07:41:52,040 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:41:52" (1/1) ... [2021-11-20 07:41:52,049 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 07:41:52,208 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 07:41:53,354 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-20 07:41:54,094 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:41:54,138 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-11-20 07:41:54,198 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 07:41:54,410 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-20 07:41:54,654 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:41:54,683 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 07:41:54,888 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-11-20 07:41:55,048 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:41:55,177 INFO L208 MainTranslator]: Completed translation [2021-11-20 07:41:55,178 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55 WrapperNode [2021-11-20 07:41:55,178 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 07:41:55,180 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 07:41:55,180 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 07:41:55,180 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 07:41:55,187 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,288 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,438 INFO L137 Inliner]: procedures = 172, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2247 [2021-11-20 07:41:55,439 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 07:41:55,440 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 07:41:55,440 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 07:41:55,441 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 07:41:55,450 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,451 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,488 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,492 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,612 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,638 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,666 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,693 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 07:41:55,695 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 07:41:55,695 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 07:41:55,696 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 07:41:55,697 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (1/1) ... [2021-11-20 07:41:55,705 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:41:55,718 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:41:55,734 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 07:41:55,748 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 07:41:55,784 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-20 07:41:55,784 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-20 07:41:55,785 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-20 07:41:55,785 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-20 07:41:55,785 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-20 07:41:55,785 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2021-11-20 07:41:55,785 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2021-11-20 07:41:55,786 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2021-11-20 07:41:55,786 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2021-11-20 07:41:55,786 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2021-11-20 07:41:55,786 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2021-11-20 07:41:55,786 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-20 07:41:55,787 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-20 07:41:55,787 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 07:41:55,787 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-20 07:41:55,787 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 07:41:55,787 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-20 07:41:55,787 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-20 07:41:55,788 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 07:41:55,788 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 07:41:55,788 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-20 07:41:55,788 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-20 07:41:55,788 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-20 07:41:55,789 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-20 07:41:55,789 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-20 07:41:55,789 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-20 07:41:55,789 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 07:41:55,789 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 07:41:55,789 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-20 07:41:55,790 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-20 07:41:55,790 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 07:41:55,790 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 07:41:55,790 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-20 07:41:55,791 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-20 07:41:55,791 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-20 07:41:55,791 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-20 07:41:55,791 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-20 07:41:55,792 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-20 07:41:55,792 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-20 07:41:55,792 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-20 07:41:55,828 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 07:41:55,829 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 07:41:55,829 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2021-11-20 07:41:55,829 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2021-11-20 07:41:55,829 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 07:41:55,829 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 07:41:55,830 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-20 07:41:55,830 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-20 07:41:55,831 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-20 07:41:55,831 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-20 07:41:55,832 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-20 07:41:55,832 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-20 07:41:55,832 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 07:41:55,833 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 07:41:55,833 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-20 07:41:55,833 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-20 07:41:55,833 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 07:41:55,833 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 07:41:55,834 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 07:41:55,834 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 07:41:55,835 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 07:41:55,835 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-20 07:41:55,835 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-20 07:41:55,835 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 07:41:55,836 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-20 07:41:55,836 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-20 07:41:55,836 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 07:41:55,836 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 07:41:55,837 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-20 07:41:55,837 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-20 07:41:55,837 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-20 07:41:55,838 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-20 07:41:55,838 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-20 07:41:55,838 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 07:41:55,838 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-20 07:41:55,838 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-20 07:41:55,839 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-20 07:41:55,839 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-20 07:41:55,839 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-20 07:41:55,839 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-20 07:41:55,839 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-20 07:41:55,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-20 07:41:55,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-20 07:41:55,841 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 07:41:55,841 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-20 07:41:55,841 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 07:41:55,841 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-20 07:41:55,841 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-20 07:41:55,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-20 07:41:55,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-20 07:41:55,843 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-20 07:41:55,843 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-20 07:41:55,844 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2021-11-20 07:41:55,844 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2021-11-20 07:41:55,844 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-20 07:41:55,845 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-20 07:41:55,845 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-20 07:41:55,845 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-20 07:41:55,845 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-20 07:41:55,845 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-20 07:41:55,846 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-20 07:41:55,846 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-20 07:41:55,846 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-20 07:41:55,846 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-20 07:41:55,846 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 07:41:55,847 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 07:41:55,847 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-20 07:41:55,847 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-20 07:41:56,539 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 07:41:56,542 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 07:41:56,735 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 07:42:13,591 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 07:42:13,609 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 07:42:13,610 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 07:42:13,613 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:42:13 BoogieIcfgContainer [2021-11-20 07:42:13,614 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 07:42:13,615 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 07:42:13,616 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 07:42:13,619 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 07:42:13,619 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 07:41:52" (1/3) ... [2021-11-20 07:42:13,620 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44e0028 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:42:13, skipping insertion in model container [2021-11-20 07:42:13,620 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:41:55" (2/3) ... [2021-11-20 07:42:13,621 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44e0028 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:42:13, skipping insertion in model container [2021-11-20 07:42:13,621 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:42:13" (3/3) ... [2021-11-20 07:42:13,623 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 07:42:13,629 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 07:42:13,629 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 07:42:13,690 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 07:42:13,696 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 07:42:13,697 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 07:42:13,738 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2021-11-20 07:42:13,751 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-11-20 07:42:13,751 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:13,752 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:13,753 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:13,759 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:13,759 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2021-11-20 07:42:13,777 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:13,777 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1554805383] [2021-11-20 07:42:13,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:13,778 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:13,779 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:13,782 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:13,803 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-20 07:42:14,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:14,405 INFO L263 TraceCheckSpWp]: Trace formula consists of 784 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 07:42:14,410 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:14,840 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 07:42:14,840 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:15,325 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 07:42:15,326 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:15,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1554805383] [2021-11-20 07:42:15,327 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1554805383] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:15,327 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:15,327 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2021-11-20 07:42:15,329 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [752795720] [2021-11-20 07:42:15,329 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:15,333 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:42:15,334 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:15,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:42:15,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:42:15,374 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 6 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 07:42:15,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:15,915 INFO L93 Difference]: Finished difference Result 1360 states and 1969 transitions. [2021-11-20 07:42:15,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:42:15,920 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 6 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 45 [2021-11-20 07:42:15,921 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:15,951 INFO L225 Difference]: With dead ends: 1360 [2021-11-20 07:42:15,951 INFO L226 Difference]: Without dead ends: 674 [2021-11-20 07:42:15,963 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=25, Invalid=31, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:42:15,967 INFO L933 BasicCegarLoop]: 952 mSDtfsCounter, 9 mSDsluCounter, 954 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 1906 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:15,968 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 1906 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:42:16,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 674 states. [2021-11-20 07:42:16,119 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 674 to 674. [2021-11-20 07:42:16,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 674 states, 503 states have (on average 1.359840954274354) internal successors, (684), 510 states have internal predecessors, (684), 133 states have call successors, (133), 38 states have call predecessors, (133), 37 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2021-11-20 07:42:16,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 674 states to 674 states and 949 transitions. [2021-11-20 07:42:16,140 INFO L78 Accepts]: Start accepts. Automaton has 674 states and 949 transitions. Word has length 45 [2021-11-20 07:42:16,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:16,141 INFO L470 AbstractCegarLoop]: Abstraction has 674 states and 949 transitions. [2021-11-20 07:42:16,142 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 6 states have internal predecessors, (33), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 07:42:16,142 INFO L276 IsEmpty]: Start isEmpty. Operand 674 states and 949 transitions. [2021-11-20 07:42:16,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-20 07:42:16,153 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:16,154 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:16,181 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:16,372 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:16,373 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:16,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:16,374 INFO L85 PathProgramCache]: Analyzing trace with hash 785966256, now seen corresponding path program 1 times [2021-11-20 07:42:16,376 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:16,377 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1126875675] [2021-11-20 07:42:16,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:16,377 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:16,378 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:16,384 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:16,413 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-20 07:42:17,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:17,146 INFO L263 TraceCheckSpWp]: Trace formula consists of 794 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-20 07:42:17,150 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:17,595 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 07:42:17,595 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:18,482 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 07:42:18,482 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:18,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1126875675] [2021-11-20 07:42:18,483 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1126875675] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:42:18,483 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-20 07:42:18,483 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 10 [2021-11-20 07:42:18,483 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1157149667] [2021-11-20 07:42:18,484 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-20 07:42:18,485 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 07:42:18,485 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:18,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 07:42:18,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:42:18,486 INFO L87 Difference]: Start difference. First operand 674 states and 949 transitions. Second operand has 10 states, 10 states have (on average 3.7) internal successors, (37), 10 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 07:42:19,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:19,381 INFO L93 Difference]: Finished difference Result 1343 states and 1892 transitions. [2021-11-20 07:42:19,382 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 07:42:19,382 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 3.7) internal successors, (37), 10 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2021-11-20 07:42:19,383 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:19,396 INFO L225 Difference]: With dead ends: 1343 [2021-11-20 07:42:19,396 INFO L226 Difference]: Without dead ends: 678 [2021-11-20 07:42:19,400 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=71, Invalid=139, Unknown=0, NotChecked=0, Total=210 [2021-11-20 07:42:19,402 INFO L933 BasicCegarLoop]: 940 mSDtfsCounter, 16 mSDsluCounter, 3750 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 4690 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:19,403 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 4690 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-20 07:42:19,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678 states. [2021-11-20 07:42:19,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678 to 678. [2021-11-20 07:42:19,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 678 states, 507 states have (on average 1.3550295857988166) internal successors, (687), 514 states have internal predecessors, (687), 133 states have call successors, (133), 38 states have call predecessors, (133), 37 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2021-11-20 07:42:19,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 678 states to 678 states and 952 transitions. [2021-11-20 07:42:19,473 INFO L78 Accepts]: Start accepts. Automaton has 678 states and 952 transitions. Word has length 47 [2021-11-20 07:42:19,474 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:19,474 INFO L470 AbstractCegarLoop]: Abstraction has 678 states and 952 transitions. [2021-11-20 07:42:19,475 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 3.7) internal successors, (37), 10 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 07:42:19,475 INFO L276 IsEmpty]: Start isEmpty. Operand 678 states and 952 transitions. [2021-11-20 07:42:19,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-11-20 07:42:19,481 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:19,482 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:19,508 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:19,702 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:19,702 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:19,703 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:19,703 INFO L85 PathProgramCache]: Analyzing trace with hash 728136240, now seen corresponding path program 2 times [2021-11-20 07:42:19,705 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:19,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [9784523] [2021-11-20 07:42:19,706 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 07:42:19,706 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:19,706 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:19,708 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:19,749 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-20 07:42:20,272 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-20 07:42:20,272 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 07:42:20,296 INFO L263 TraceCheckSpWp]: Trace formula consists of 746 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 07:42:20,300 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:20,518 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 07:42:20,518 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:20,794 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 07:42:20,797 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:20,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [9784523] [2021-11-20 07:42:20,798 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [9784523] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:20,798 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:20,798 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 07:42:20,799 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834390770] [2021-11-20 07:42:20,799 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:20,801 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 07:42:20,802 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:20,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 07:42:20,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 07:42:20,803 INFO L87 Difference]: Start difference. First operand 678 states and 952 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 07:42:24,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:24,045 INFO L93 Difference]: Finished difference Result 2579 states and 3644 transitions. [2021-11-20 07:42:24,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 07:42:24,046 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 49 [2021-11-20 07:42:24,046 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:24,064 INFO L225 Difference]: With dead ends: 2579 [2021-11-20 07:42:24,064 INFO L226 Difference]: Without dead ends: 1921 [2021-11-20 07:42:24,068 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 07:42:24,069 INFO L933 BasicCegarLoop]: 1198 mSDtfsCounter, 2414 mSDsluCounter, 1523 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 260 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2414 SdHoareTripleChecker+Valid, 2721 SdHoareTripleChecker+Invalid, 533 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 260 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:24,069 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2414 Valid, 2721 Invalid, 533 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [260 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2021-11-20 07:42:24,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1921 states. [2021-11-20 07:42:24,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1921 to 1921. [2021-11-20 07:42:24,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1921 states, 1432 states have (on average 1.3652234636871508) internal successors, (1955), 1453 states have internal predecessors, (1955), 379 states have call successors, (379), 110 states have call predecessors, (379), 109 states have return successors, (378), 369 states have call predecessors, (378), 378 states have call successors, (378) [2021-11-20 07:42:24,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1921 states to 1921 states and 2712 transitions. [2021-11-20 07:42:24,179 INFO L78 Accepts]: Start accepts. Automaton has 1921 states and 2712 transitions. Word has length 49 [2021-11-20 07:42:24,179 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:24,180 INFO L470 AbstractCegarLoop]: Abstraction has 1921 states and 2712 transitions. [2021-11-20 07:42:24,180 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 07:42:24,180 INFO L276 IsEmpty]: Start isEmpty. Operand 1921 states and 2712 transitions. [2021-11-20 07:42:24,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-20 07:42:24,183 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:24,184 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:24,212 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:24,405 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:24,406 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:24,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:24,406 INFO L85 PathProgramCache]: Analyzing trace with hash -602378178, now seen corresponding path program 1 times [2021-11-20 07:42:24,408 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:24,408 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [416664427] [2021-11-20 07:42:24,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:24,409 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:24,409 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:24,410 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:24,447 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-20 07:42:25,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:25,266 INFO L263 TraceCheckSpWp]: Trace formula consists of 949 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 07:42:25,270 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:25,735 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 07:42:25,735 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:26,591 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 07:42:26,592 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:26,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [416664427] [2021-11-20 07:42:26,592 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [416664427] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:26,592 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:26,592 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-20 07:42:26,593 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1729827242] [2021-11-20 07:42:26,593 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:26,593 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 07:42:26,593 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:26,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 07:42:26,594 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:42:26,594 INFO L87 Difference]: Start difference. First operand 1921 states and 2712 transitions. Second operand has 8 states, 6 states have (on average 8.0) internal successors, (48), 7 states have internal predecessors, (48), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-20 07:42:28,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:28,893 INFO L93 Difference]: Finished difference Result 4171 states and 5956 transitions. [2021-11-20 07:42:28,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:42:28,894 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 8.0) internal successors, (48), 7 states have internal predecessors, (48), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 67 [2021-11-20 07:42:28,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:28,917 INFO L225 Difference]: With dead ends: 4171 [2021-11-20 07:42:28,917 INFO L226 Difference]: Without dead ends: 2270 [2021-11-20 07:42:28,926 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 126 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:42:28,927 INFO L933 BasicCegarLoop]: 1463 mSDtfsCounter, 431 mSDsluCounter, 6760 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 516 SdHoareTripleChecker+Valid, 8223 SdHoareTripleChecker+Invalid, 184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 40 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:28,928 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [516 Valid, 8223 Invalid, 184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 143 Invalid, 0 Unknown, 40 Unchecked, 2.1s Time] [2021-11-20 07:42:28,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2270 states. [2021-11-20 07:42:29,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2270 to 1921. [2021-11-20 07:42:29,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1921 states, 1432 states have (on average 1.3645251396648044) internal successors, (1954), 1453 states have internal predecessors, (1954), 379 states have call successors, (379), 110 states have call predecessors, (379), 109 states have return successors, (378), 369 states have call predecessors, (378), 378 states have call successors, (378) [2021-11-20 07:42:29,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1921 states to 1921 states and 2711 transitions. [2021-11-20 07:42:29,058 INFO L78 Accepts]: Start accepts. Automaton has 1921 states and 2711 transitions. Word has length 67 [2021-11-20 07:42:29,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:29,059 INFO L470 AbstractCegarLoop]: Abstraction has 1921 states and 2711 transitions. [2021-11-20 07:42:29,060 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 8.0) internal successors, (48), 7 states have internal predecessors, (48), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-20 07:42:29,060 INFO L276 IsEmpty]: Start isEmpty. Operand 1921 states and 2711 transitions. [2021-11-20 07:42:29,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-20 07:42:29,065 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:29,065 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:29,102 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:29,284 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:29,285 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:29,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:29,285 INFO L85 PathProgramCache]: Analyzing trace with hash 1887150784, now seen corresponding path program 1 times [2021-11-20 07:42:29,287 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:29,287 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [969395421] [2021-11-20 07:42:29,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:29,287 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:29,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:29,289 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:29,329 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-20 07:42:30,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:30,292 INFO L263 TraceCheckSpWp]: Trace formula consists of 949 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 07:42:30,297 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:31,035 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 07:42:31,035 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:31,608 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 07:42:31,608 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:31,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [969395421] [2021-11-20 07:42:31,609 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [969395421] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:31,609 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:31,609 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 7 [2021-11-20 07:42:31,609 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [708034204] [2021-11-20 07:42:31,609 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:31,610 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:42:31,610 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:31,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:42:31,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:42:31,611 INFO L87 Difference]: Start difference. First operand 1921 states and 2711 transitions. Second operand has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 07:42:32,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:32,208 INFO L93 Difference]: Finished difference Result 5720 states and 8173 transitions. [2021-11-20 07:42:32,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 07:42:32,209 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 67 [2021-11-20 07:42:32,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:32,246 INFO L225 Difference]: With dead ends: 5720 [2021-11-20 07:42:32,249 INFO L226 Difference]: Without dead ends: 3809 [2021-11-20 07:42:32,260 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 127 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:42:32,262 INFO L933 BasicCegarLoop]: 1117 mSDtfsCounter, 895 mSDsluCounter, 5400 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 6517 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:32,263 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [895 Valid, 6517 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 07:42:32,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3809 states. [2021-11-20 07:42:32,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3809 to 3809. [2021-11-20 07:42:32,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3809 states, 2838 states have (on average 1.365045806906272) internal successors, (3874), 2880 states have internal predecessors, (3874), 753 states have call successors, (753), 218 states have call predecessors, (753), 217 states have return successors, (797), 734 states have call predecessors, (797), 752 states have call successors, (797) [2021-11-20 07:42:32,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3809 states to 3809 states and 5424 transitions. [2021-11-20 07:42:32,544 INFO L78 Accepts]: Start accepts. Automaton has 3809 states and 5424 transitions. Word has length 67 [2021-11-20 07:42:32,546 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:32,546 INFO L470 AbstractCegarLoop]: Abstraction has 3809 states and 5424 transitions. [2021-11-20 07:42:32,546 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (10), 3 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 07:42:32,546 INFO L276 IsEmpty]: Start isEmpty. Operand 3809 states and 5424 transitions. [2021-11-20 07:42:32,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-20 07:42:32,558 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:32,558 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:32,591 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:32,772 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:32,773 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:32,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:32,773 INFO L85 PathProgramCache]: Analyzing trace with hash 510620113, now seen corresponding path program 1 times [2021-11-20 07:42:32,775 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:32,775 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2007559478] [2021-11-20 07:42:32,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:32,775 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:32,776 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:32,778 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:32,819 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-20 07:42:33,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:33,669 INFO L263 TraceCheckSpWp]: Trace formula consists of 1108 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 07:42:33,674 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:34,329 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-11-20 07:42:34,329 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:34,867 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-11-20 07:42:34,868 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:34,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2007559478] [2021-11-20 07:42:34,868 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2007559478] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:34,868 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:34,869 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-20 07:42:34,869 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1145441243] [2021-11-20 07:42:34,869 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:34,870 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:42:34,870 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:34,870 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:42:34,871 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:42:34,871 INFO L87 Difference]: Start difference. First operand 3809 states and 5424 transitions. Second operand has 3 states, 3 states have (on average 33.666666666666664) internal successors, (101), 3 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 07:42:36,187 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:42:36,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:36,436 INFO L93 Difference]: Finished difference Result 10055 states and 14203 transitions. [2021-11-20 07:42:36,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:42:36,437 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 33.666666666666664) internal successors, (101), 3 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 117 [2021-11-20 07:42:36,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:36,496 INFO L225 Difference]: With dead ends: 10055 [2021-11-20 07:42:36,497 INFO L226 Difference]: Without dead ends: 6266 [2021-11-20 07:42:36,516 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 231 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:42:36,517 INFO L933 BasicCegarLoop]: 1099 mSDtfsCounter, 603 mSDsluCounter, 894 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 603 SdHoareTripleChecker+Valid, 1993 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:36,517 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [603 Valid, 1993 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-11-20 07:42:36,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6266 states. [2021-11-20 07:42:36,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6266 to 6253. [2021-11-20 07:42:36,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6253 states, 4628 states have (on average 1.349827139152982) internal successors, (6247), 4700 states have internal predecessors, (6247), 1233 states have call successors, (1233), 392 states have call predecessors, (1233), 391 states have return successors, (1304), 1202 states have call predecessors, (1304), 1232 states have call successors, (1304) [2021-11-20 07:42:36,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6253 states to 6253 states and 8784 transitions. [2021-11-20 07:42:36,972 INFO L78 Accepts]: Start accepts. Automaton has 6253 states and 8784 transitions. Word has length 117 [2021-11-20 07:42:36,973 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:36,974 INFO L470 AbstractCegarLoop]: Abstraction has 6253 states and 8784 transitions. [2021-11-20 07:42:36,974 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 33.666666666666664) internal successors, (101), 3 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 07:42:36,974 INFO L276 IsEmpty]: Start isEmpty. Operand 6253 states and 8784 transitions. [2021-11-20 07:42:36,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-11-20 07:42:36,990 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:36,990 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:37,025 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:37,212 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:37,213 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:37,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:37,213 INFO L85 PathProgramCache]: Analyzing trace with hash -1507578268, now seen corresponding path program 1 times [2021-11-20 07:42:37,216 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:37,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1591927745] [2021-11-20 07:42:37,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:37,217 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:37,217 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:37,218 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:37,260 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-20 07:42:38,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:38,095 INFO L263 TraceCheckSpWp]: Trace formula consists of 1138 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 07:42:38,100 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:38,808 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2021-11-20 07:42:38,809 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:39,367 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2021-11-20 07:42:39,367 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:39,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1591927745] [2021-11-20 07:42:39,368 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1591927745] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:39,368 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:39,368 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-20 07:42:39,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [111050263] [2021-11-20 07:42:39,368 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:39,369 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:42:39,369 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:39,370 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:42:39,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:42:39,370 INFO L87 Difference]: Start difference. First operand 6253 states and 8784 transitions. Second operand has 3 states, 3 states have (on average 41.0) internal successors, (123), 3 states have internal predecessors, (123), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-20 07:42:39,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:39,987 INFO L93 Difference]: Finished difference Result 14606 states and 20503 transitions. [2021-11-20 07:42:39,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:42:39,988 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 41.0) internal successors, (123), 3 states have internal predecessors, (123), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 134 [2021-11-20 07:42:39,989 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:40,061 INFO L225 Difference]: With dead ends: 14606 [2021-11-20 07:42:40,061 INFO L226 Difference]: Without dead ends: 8373 [2021-11-20 07:42:40,089 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 265 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:42:40,090 INFO L933 BasicCegarLoop]: 1347 mSDtfsCounter, 484 mSDsluCounter, 900 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 2247 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:40,091 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 2247 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 07:42:40,104 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8373 states. [2021-11-20 07:42:40,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8373 to 8323. [2021-11-20 07:42:40,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8323 states, 6203 states have (on average 1.3553119458326617) internal successors, (8407), 6303 states have internal predecessors, (8407), 1586 states have call successors, (1586), 534 states have call predecessors, (1586), 533 states have return successors, (1681), 1533 states have call predecessors, (1681), 1585 states have call successors, (1681) [2021-11-20 07:42:40,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8323 states to 8323 states and 11674 transitions. [2021-11-20 07:42:40,589 INFO L78 Accepts]: Start accepts. Automaton has 8323 states and 11674 transitions. Word has length 134 [2021-11-20 07:42:40,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:40,590 INFO L470 AbstractCegarLoop]: Abstraction has 8323 states and 11674 transitions. [2021-11-20 07:42:40,591 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 41.0) internal successors, (123), 3 states have internal predecessors, (123), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-20 07:42:40,591 INFO L276 IsEmpty]: Start isEmpty. Operand 8323 states and 11674 transitions. [2021-11-20 07:42:40,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2021-11-20 07:42:40,615 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:40,615 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:40,657 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:40,840 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:40,841 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:40,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:40,841 INFO L85 PathProgramCache]: Analyzing trace with hash 1851568064, now seen corresponding path program 1 times [2021-11-20 07:42:40,844 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:40,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [779617167] [2021-11-20 07:42:40,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:40,844 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:40,844 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:40,847 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:40,872 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-20 07:42:41,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:41,895 INFO L263 TraceCheckSpWp]: Trace formula consists of 1177 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 07:42:41,900 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:42,580 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-11-20 07:42:42,581 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:43,061 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2021-11-20 07:42:43,062 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:43,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [779617167] [2021-11-20 07:42:43,062 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [779617167] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:43,062 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:43,062 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-20 07:42:43,062 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1519740870] [2021-11-20 07:42:43,062 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:43,063 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:42:43,063 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:43,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:42:43,064 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:42:43,064 INFO L87 Difference]: Start difference. First operand 8323 states and 11674 transitions. Second operand has 5 states, 5 states have (on average 22.6) internal successors, (113), 5 states have internal predecessors, (113), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-11-20 07:42:44,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:44,343 INFO L93 Difference]: Finished difference Result 13986 states and 19593 transitions. [2021-11-20 07:42:44,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:42:44,344 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 22.6) internal successors, (113), 5 states have internal predecessors, (113), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 142 [2021-11-20 07:42:44,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:44,400 INFO L225 Difference]: With dead ends: 13986 [2021-11-20 07:42:44,400 INFO L226 Difference]: Without dead ends: 5684 [2021-11-20 07:42:44,429 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 284 GetRequests, 279 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:42:44,430 INFO L933 BasicCegarLoop]: 941 mSDtfsCounter, 24 mSDsluCounter, 2813 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 3754 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:44,430 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [24 Valid, 3754 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-11-20 07:42:44,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5684 states. [2021-11-20 07:42:44,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5684 to 5596. [2021-11-20 07:42:44,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5596 states, 4172 states have (on average 1.3552253116011506) internal successors, (5654), 4238 states have internal predecessors, (5654), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 363 states have return successors, (1123), 1025 states have call predecessors, (1123), 1059 states have call successors, (1123) [2021-11-20 07:42:44,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5596 states to 5596 states and 7837 transitions. [2021-11-20 07:42:44,684 INFO L78 Accepts]: Start accepts. Automaton has 5596 states and 7837 transitions. Word has length 142 [2021-11-20 07:42:44,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:44,685 INFO L470 AbstractCegarLoop]: Abstraction has 5596 states and 7837 transitions. [2021-11-20 07:42:44,685 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 22.6) internal successors, (113), 5 states have internal predecessors, (113), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-11-20 07:42:44,686 INFO L276 IsEmpty]: Start isEmpty. Operand 5596 states and 7837 transitions. [2021-11-20 07:42:44,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-11-20 07:42:44,706 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:44,706 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:44,743 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:44,920 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:44,921 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:44,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:44,921 INFO L85 PathProgramCache]: Analyzing trace with hash -1046565723, now seen corresponding path program 1 times [2021-11-20 07:42:44,923 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:44,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1627966340] [2021-11-20 07:42:44,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:44,924 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:44,924 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:44,925 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:44,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-20 07:42:45,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:46,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 1198 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 07:42:46,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:46,869 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2021-11-20 07:42:46,870 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:47,867 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-11-20 07:42:47,867 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:47,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1627966340] [2021-11-20 07:42:47,867 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1627966340] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:47,868 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:47,868 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-20 07:42:47,868 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1889750049] [2021-11-20 07:42:47,868 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:47,869 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 07:42:47,869 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:47,870 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 07:42:47,870 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:42:47,870 INFO L87 Difference]: Start difference. First operand 5596 states and 7837 transitions. Second operand has 8 states, 6 states have (on average 20.0) internal successors, (120), 7 states have internal predecessors, (120), 4 states have call successors, (23), 2 states have call predecessors, (23), 4 states have return successors, (22), 3 states have call predecessors, (22), 4 states have call successors, (22) [2021-11-20 07:42:50,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:50,251 INFO L93 Difference]: Finished difference Result 11151 states and 15624 transitions. [2021-11-20 07:42:50,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:42:50,252 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 20.0) internal successors, (120), 7 states have internal predecessors, (120), 4 states have call successors, (23), 2 states have call predecessors, (23), 4 states have return successors, (22), 3 states have call predecessors, (22), 4 states have call successors, (22) Word has length 148 [2021-11-20 07:42:50,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:50,278 INFO L225 Difference]: With dead ends: 11151 [2021-11-20 07:42:50,279 INFO L226 Difference]: Without dead ends: 5601 [2021-11-20 07:42:50,298 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 295 GetRequests, 288 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:42:50,301 INFO L933 BasicCegarLoop]: 945 mSDtfsCounter, 419 mSDsluCounter, 4201 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 502 SdHoareTripleChecker+Valid, 5146 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 30 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:50,302 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [502 Valid, 5146 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 86 Invalid, 0 Unknown, 30 Unchecked, 2.0s Time] [2021-11-20 07:42:50,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5601 states. [2021-11-20 07:42:50,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5601 to 5596. [2021-11-20 07:42:50,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5596 states, 4172 states have (on average 1.354745925215724) internal successors, (5652), 4238 states have internal predecessors, (5652), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 363 states have return successors, (1123), 1025 states have call predecessors, (1123), 1059 states have call successors, (1123) [2021-11-20 07:42:50,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5596 states to 5596 states and 7835 transitions. [2021-11-20 07:42:50,546 INFO L78 Accepts]: Start accepts. Automaton has 5596 states and 7835 transitions. Word has length 148 [2021-11-20 07:42:50,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:50,548 INFO L470 AbstractCegarLoop]: Abstraction has 5596 states and 7835 transitions. [2021-11-20 07:42:50,548 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 20.0) internal successors, (120), 7 states have internal predecessors, (120), 4 states have call successors, (23), 2 states have call predecessors, (23), 4 states have return successors, (22), 3 states have call predecessors, (22), 4 states have call successors, (22) [2021-11-20 07:42:50,548 INFO L276 IsEmpty]: Start isEmpty. Operand 5596 states and 7835 transitions. [2021-11-20 07:42:50,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-11-20 07:42:50,567 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:50,567 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:50,606 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:50,792 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:50,793 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:50,793 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:50,793 INFO L85 PathProgramCache]: Analyzing trace with hash 829917095, now seen corresponding path program 1 times [2021-11-20 07:42:50,794 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:50,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [137081343] [2021-11-20 07:42:50,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:50,795 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:50,795 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:50,796 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:50,799 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-20 07:42:51,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:52,015 INFO L263 TraceCheckSpWp]: Trace formula consists of 1198 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-20 07:42:52,019 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:52,897 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-20 07:42:52,897 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:54,342 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 99 trivial. 0 not checked. [2021-11-20 07:42:54,342 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:54,342 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [137081343] [2021-11-20 07:42:54,343 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [137081343] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:54,343 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:54,343 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7, 7] imperfect sequences [] total 12 [2021-11-20 07:42:54,343 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [851008808] [2021-11-20 07:42:54,343 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:54,344 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-11-20 07:42:54,344 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:54,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-11-20 07:42:54,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2021-11-20 07:42:54,345 INFO L87 Difference]: Start difference. First operand 5596 states and 7835 transitions. Second operand has 12 states, 12 states have (on average 9.583333333333334) internal successors, (115), 8 states have internal predecessors, (115), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 07:42:54,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:54,875 INFO L93 Difference]: Finished difference Result 11210 states and 15735 transitions. [2021-11-20 07:42:54,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:42:54,877 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.583333333333334) internal successors, (115), 8 states have internal predecessors, (115), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) Word has length 148 [2021-11-20 07:42:54,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:54,900 INFO L225 Difference]: With dead ends: 11210 [2021-11-20 07:42:54,900 INFO L226 Difference]: Without dead ends: 5660 [2021-11-20 07:42:54,915 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 294 GetRequests, 284 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2021-11-20 07:42:54,916 INFO L933 BasicCegarLoop]: 938 mSDtfsCounter, 0 mSDsluCounter, 4685 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 5623 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:54,917 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 5623 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 07:42:54,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5660 states. [2021-11-20 07:42:55,127 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5660 to 5652. [2021-11-20 07:42:55,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5652 states, 4212 states have (on average 1.3513770180436848) internal successors, (5692), 4278 states have internal predecessors, (5692), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 379 states have return successors, (1183), 1041 states have call predecessors, (1183), 1059 states have call successors, (1183) [2021-11-20 07:42:55,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5652 states to 5652 states and 7935 transitions. [2021-11-20 07:42:55,156 INFO L78 Accepts]: Start accepts. Automaton has 5652 states and 7935 transitions. Word has length 148 [2021-11-20 07:42:55,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:55,156 INFO L470 AbstractCegarLoop]: Abstraction has 5652 states and 7935 transitions. [2021-11-20 07:42:55,157 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.583333333333334) internal successors, (115), 8 states have internal predecessors, (115), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-20 07:42:55,157 INFO L276 IsEmpty]: Start isEmpty. Operand 5652 states and 7935 transitions. [2021-11-20 07:42:55,175 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2021-11-20 07:42:55,176 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:55,176 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:55,213 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-20 07:42:55,395 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:55,396 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:55,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:55,396 INFO L85 PathProgramCache]: Analyzing trace with hash 198615179, now seen corresponding path program 1 times [2021-11-20 07:42:55,397 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:55,397 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1806029033] [2021-11-20 07:42:55,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:55,397 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:55,398 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:55,398 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:55,399 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-20 07:42:56,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:42:56,547 INFO L263 TraceCheckSpWp]: Trace formula consists of 1213 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-20 07:42:56,552 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:42:57,137 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-20 07:42:57,137 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:42:58,134 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-20 07:42:58,134 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:42:58,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1806029033] [2021-11-20 07:42:58,134 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1806029033] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:42:58,134 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:42:58,135 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-20 07:42:58,135 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441619012] [2021-11-20 07:42:58,135 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:42:58,136 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:42:58,136 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:42:58,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:42:58,137 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:42:58,137 INFO L87 Difference]: Start difference. First operand 5652 states and 7935 transitions. Second operand has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2021-11-20 07:42:58,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:42:58,387 INFO L93 Difference]: Finished difference Result 11336 states and 16103 transitions. [2021-11-20 07:42:58,387 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 07:42:58,388 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) Word has length 154 [2021-11-20 07:42:58,388 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:42:58,477 INFO L225 Difference]: With dead ends: 11336 [2021-11-20 07:42:58,477 INFO L226 Difference]: Without dead ends: 5730 [2021-11-20 07:42:58,491 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 306 GetRequests, 303 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:42:58,492 INFO L933 BasicCegarLoop]: 937 mSDtfsCounter, 2 mSDsluCounter, 2806 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3743 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:42:58,493 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 3743 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:42:58,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5730 states. [2021-11-20 07:42:58,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5730 to 5712. [2021-11-20 07:42:58,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5712 states, 4254 states have (on average 1.3479078514339444) internal successors, (5734), 4326 states have internal predecessors, (5734), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 397 states have return successors, (1205), 1053 states have call predecessors, (1205), 1059 states have call successors, (1205) [2021-11-20 07:42:58,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5712 states to 5712 states and 7999 transitions. [2021-11-20 07:42:58,807 INFO L78 Accepts]: Start accepts. Automaton has 5712 states and 7999 transitions. Word has length 154 [2021-11-20 07:42:58,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:42:58,808 INFO L470 AbstractCegarLoop]: Abstraction has 5712 states and 7999 transitions. [2021-11-20 07:42:58,808 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2021-11-20 07:42:58,809 INFO L276 IsEmpty]: Start isEmpty. Operand 5712 states and 7999 transitions. [2021-11-20 07:42:58,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-11-20 07:42:58,826 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:42:58,826 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:42:58,868 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Ended with exit code 0 [2021-11-20 07:42:59,052 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:42:59,053 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:42:59,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:42:59,053 INFO L85 PathProgramCache]: Analyzing trace with hash -1478023259, now seen corresponding path program 1 times [2021-11-20 07:42:59,054 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:42:59,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [953943634] [2021-11-20 07:42:59,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:42:59,054 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:42:59,055 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:42:59,055 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:42:59,057 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-20 07:43:00,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:43:00,236 INFO L263 TraceCheckSpWp]: Trace formula consists of 1236 conjuncts, 29 conjunts are in the unsatisfiable core [2021-11-20 07:43:00,241 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:43:01,891 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-11-20 07:43:01,891 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:43:07,100 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-11-20 07:43:07,101 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:43:07,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [953943634] [2021-11-20 07:43:07,101 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [953943634] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:43:07,101 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:43:07,101 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12, 12] imperfect sequences [] total 22 [2021-11-20 07:43:07,102 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [743873631] [2021-11-20 07:43:07,102 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:43:07,102 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-11-20 07:43:07,103 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:43:07,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-11-20 07:43:07,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=411, Unknown=0, NotChecked=0, Total=462 [2021-11-20 07:43:07,104 INFO L87 Difference]: Start difference. First operand 5712 states and 7999 transitions. Second operand has 22 states, 22 states have (on average 5.363636363636363) internal successors, (118), 16 states have internal predecessors, (118), 4 states have call successors, (18), 2 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 3 states have call successors, (20) [2021-11-20 07:43:08,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:43:08,691 INFO L93 Difference]: Finished difference Result 11448 states and 16183 transitions. [2021-11-20 07:43:08,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 07:43:08,693 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 5.363636363636363) internal successors, (118), 16 states have internal predecessors, (118), 4 states have call successors, (18), 2 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 3 states have call successors, (20) Word has length 161 [2021-11-20 07:43:08,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:43:08,721 INFO L225 Difference]: With dead ends: 11448 [2021-11-20 07:43:08,721 INFO L226 Difference]: Without dead ends: 5782 [2021-11-20 07:43:08,738 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 301 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=72, Invalid=528, Unknown=0, NotChecked=0, Total=600 [2021-11-20 07:43:08,739 INFO L933 BasicCegarLoop]: 947 mSDtfsCounter, 15 mSDsluCounter, 13204 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 14151 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-11-20 07:43:08,739 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 14151 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-11-20 07:43:08,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5782 states. [2021-11-20 07:43:09,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5782 to 5766. [2021-11-20 07:43:09,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5766 states, 4294 states have (on average 1.3418723800652073) internal successors, (5762), 4362 states have internal predecessors, (5762), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 411 states have return successors, (1233), 1071 states have call predecessors, (1233), 1059 states have call successors, (1233) [2021-11-20 07:43:09,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5766 states to 5766 states and 8055 transitions. [2021-11-20 07:43:09,090 INFO L78 Accepts]: Start accepts. Automaton has 5766 states and 8055 transitions. Word has length 161 [2021-11-20 07:43:09,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:43:09,091 INFO L470 AbstractCegarLoop]: Abstraction has 5766 states and 8055 transitions. [2021-11-20 07:43:09,091 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 5.363636363636363) internal successors, (118), 16 states have internal predecessors, (118), 4 states have call successors, (18), 2 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 3 states have call successors, (20) [2021-11-20 07:43:09,091 INFO L276 IsEmpty]: Start isEmpty. Operand 5766 states and 8055 transitions. [2021-11-20 07:43:09,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2021-11-20 07:43:09,111 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:43:09,112 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:43:09,161 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-20 07:43:09,336 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:43:09,337 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:43:09,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:43:09,337 INFO L85 PathProgramCache]: Analyzing trace with hash 561002325, now seen corresponding path program 1 times [2021-11-20 07:43:09,339 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:43:09,339 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [960910489] [2021-11-20 07:43:09,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:43:09,339 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:43:09,340 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:43:09,341 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:43:09,364 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-20 07:43:10,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:43:10,767 INFO L263 TraceCheckSpWp]: Trace formula consists of 1270 conjuncts, 26 conjunts are in the unsatisfiable core [2021-11-20 07:43:10,773 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:43:12,411 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-20 07:43:12,411 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:43:18,478 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-20 07:43:18,478 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:43:18,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [960910489] [2021-11-20 07:43:18,479 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [960910489] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:43:18,479 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:43:18,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13, 13] imperfect sequences [] total 14 [2021-11-20 07:43:18,479 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884566562] [2021-11-20 07:43:18,479 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:43:18,480 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-20 07:43:18,480 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:43:18,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-20 07:43:18,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=155, Unknown=0, NotChecked=0, Total=182 [2021-11-20 07:43:18,481 INFO L87 Difference]: Start difference. First operand 5766 states and 8055 transitions. Second operand has 14 states, 14 states have (on average 7.928571428571429) internal successors, (111), 10 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-20 07:43:20,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:43:20,148 INFO L93 Difference]: Finished difference Result 11526 states and 16243 transitions. [2021-11-20 07:43:20,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 07:43:20,150 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 7.928571428571429) internal successors, (111), 10 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) Word has length 170 [2021-11-20 07:43:20,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:43:20,176 INFO L225 Difference]: With dead ends: 11526 [2021-11-20 07:43:20,176 INFO L226 Difference]: Without dead ends: 5806 [2021-11-20 07:43:20,191 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 327 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=40, Invalid=232, Unknown=0, NotChecked=0, Total=272 [2021-11-20 07:43:20,192 INFO L933 BasicCegarLoop]: 943 mSDtfsCounter, 11 mSDsluCounter, 10339 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 11282 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:43:20,193 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11 Valid, 11282 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-11-20 07:43:20,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5806 states. [2021-11-20 07:43:20,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5806 to 5800. [2021-11-20 07:43:20,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5800 states, 4324 states have (on average 1.33950046253469) internal successors, (5792), 4382 states have internal predecessors, (5792), 1060 states have call successors, (1060), 364 states have call predecessors, (1060), 415 states have return successors, (1239), 1085 states have call predecessors, (1239), 1059 states have call successors, (1239) [2021-11-20 07:43:20,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5800 states to 5800 states and 8091 transitions. [2021-11-20 07:43:20,494 INFO L78 Accepts]: Start accepts. Automaton has 5800 states and 8091 transitions. Word has length 170 [2021-11-20 07:43:20,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:43:20,495 INFO L470 AbstractCegarLoop]: Abstraction has 5800 states and 8091 transitions. [2021-11-20 07:43:20,495 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 7.928571428571429) internal successors, (111), 10 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-20 07:43:20,496 INFO L276 IsEmpty]: Start isEmpty. Operand 5800 states and 8091 transitions. [2021-11-20 07:43:20,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-11-20 07:43:20,513 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:43:20,514 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:43:20,553 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-20 07:43:20,728 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:43:20,729 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:43:20,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:43:20,729 INFO L85 PathProgramCache]: Analyzing trace with hash -1188259002, now seen corresponding path program 1 times [2021-11-20 07:43:20,730 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:43:20,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [469972181] [2021-11-20 07:43:20,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:43:20,730 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:43:20,731 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:43:20,731 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:43:20,734 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-20 07:43:21,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:43:21,882 INFO L263 TraceCheckSpWp]: Trace formula consists of 1251 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 07:43:21,886 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:43:22,923 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 80 proven. 0 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2021-11-20 07:43:22,923 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:43:23,560 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-11-20 07:43:23,560 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:43:23,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [469972181] [2021-11-20 07:43:23,560 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [469972181] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:43:23,560 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:43:23,560 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 07:43:23,561 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1239932701] [2021-11-20 07:43:23,561 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:43:23,561 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 07:43:23,561 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:43:23,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 07:43:23,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 07:43:23,562 INFO L87 Difference]: Start difference. First operand 5800 states and 8091 transitions. Second operand has 4 states, 4 states have (on average 45.0) internal successors, (180), 4 states have internal predecessors, (180), 4 states have call successors, (32), 3 states have call predecessors, (32), 3 states have return successors, (31), 4 states have call predecessors, (31), 4 states have call successors, (31) [2021-11-20 07:43:25,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:43:25,868 INFO L93 Difference]: Finished difference Result 16146 states and 22418 transitions. [2021-11-20 07:43:25,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 07:43:25,869 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 45.0) internal successors, (180), 4 states have internal predecessors, (180), 4 states have call successors, (32), 3 states have call predecessors, (32), 3 states have return successors, (31), 4 states have call predecessors, (31), 4 states have call successors, (31) Word has length 172 [2021-11-20 07:43:25,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:43:25,917 INFO L225 Difference]: With dead ends: 16146 [2021-11-20 07:43:25,918 INFO L226 Difference]: Without dead ends: 10392 [2021-11-20 07:43:25,997 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 340 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 07:43:25,999 INFO L933 BasicCegarLoop]: 1250 mSDtfsCounter, 1797 mSDsluCounter, 1172 mSDsCounter, 0 mSdLazyCounter, 228 mSolverCounterSat, 208 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1797 SdHoareTripleChecker+Valid, 2422 SdHoareTripleChecker+Invalid, 436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 208 IncrementalHoareTripleChecker+Valid, 228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:43:26,000 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1797 Valid, 2422 Invalid, 436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [208 Valid, 228 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2021-11-20 07:43:26,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10392 states. [2021-11-20 07:43:26,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10392 to 10336. [2021-11-20 07:43:26,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10336 states, 7780 states have (on average 1.3359897172236503) internal successors, (10394), 7870 states have internal predecessors, (10394), 1756 states have call successors, (1756), 696 states have call predecessors, (1756), 799 states have return successors, (2095), 1809 states have call predecessors, (2095), 1755 states have call successors, (2095) [2021-11-20 07:43:26,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10336 states to 10336 states and 14245 transitions. [2021-11-20 07:43:26,445 INFO L78 Accepts]: Start accepts. Automaton has 10336 states and 14245 transitions. Word has length 172 [2021-11-20 07:43:26,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:43:26,446 INFO L470 AbstractCegarLoop]: Abstraction has 10336 states and 14245 transitions. [2021-11-20 07:43:26,446 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 45.0) internal successors, (180), 4 states have internal predecessors, (180), 4 states have call successors, (32), 3 states have call predecessors, (32), 3 states have return successors, (31), 4 states have call predecessors, (31), 4 states have call successors, (31) [2021-11-20 07:43:26,446 INFO L276 IsEmpty]: Start isEmpty. Operand 10336 states and 14245 transitions. [2021-11-20 07:43:26,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2021-11-20 07:43:26,474 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:43:26,474 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:43:26,516 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-20 07:43:26,688 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:43:26,689 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:43:26,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:43:26,689 INFO L85 PathProgramCache]: Analyzing trace with hash -1401601602, now seen corresponding path program 1 times [2021-11-20 07:43:26,690 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:43:26,690 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [943665575] [2021-11-20 07:43:26,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:43:26,691 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:43:26,691 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:43:26,691 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:43:26,694 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4afa9d4-0050-4bb0-85c3-927e2a04074b/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process