./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:55:56,041 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:55:56,043 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:55:56,082 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:55:56,083 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:55:56,084 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:55:56,086 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:55:56,089 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:55:56,091 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:55:56,092 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:55:56,094 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:55:56,095 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:55:56,096 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:55:56,097 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:55:56,099 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:55:56,101 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:55:56,102 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:55:56,103 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:55:56,106 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:55:56,108 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:55:56,111 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:55:56,112 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:55:56,114 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:55:56,115 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:55:56,119 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:55:56,119 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:55:56,119 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:55:56,123 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:55:56,123 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:55:56,124 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:55:56,125 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:55:56,126 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:55:56,126 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:55:56,127 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:55:56,129 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:55:56,129 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:55:56,130 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:55:56,130 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:55:56,130 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:55:56,131 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:55:56,132 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:55:56,139 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-20 06:55:56,186 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:55:56,192 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:55:56,193 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:55:56,193 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:55:56,203 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:55:56,203 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:55:56,204 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:55:56,204 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:55:56,204 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:55:56,204 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:55:56,205 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 06:55:56,205 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:55:56,206 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:55:56,206 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:55:56,206 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:55:56,206 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:55:56,206 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:55:56,207 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:55:56,207 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:55:56,207 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:55:56,207 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:55:56,208 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:55:56,208 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:55:56,208 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:55:56,208 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:55:56,208 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 06:55:56,209 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 06:55:56,209 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:55:56,209 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:55:56,210 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:55:56,211 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:55:56,211 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2021-11-20 06:55:56,528 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:55:56,559 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:55:56,562 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:55:56,563 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:55:56,564 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:55:56,566 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 06:55:56,642 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/282a81b23/4501e205bcb445568809cbe77477f91a/FLAGf98aedf2c [2021-11-20 06:55:57,429 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:55:57,429 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 06:55:57,480 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/282a81b23/4501e205bcb445568809cbe77477f91a/FLAGf98aedf2c [2021-11-20 06:55:57,956 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/282a81b23/4501e205bcb445568809cbe77477f91a [2021-11-20 06:55:57,959 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:55:57,960 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:55:57,962 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:55:57,962 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:55:57,968 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:55:57,969 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:55:57" (1/1) ... [2021-11-20 06:55:57,970 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@46fbc4bd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:55:57, skipping insertion in model container [2021-11-20 06:55:57,970 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:55:57" (1/1) ... [2021-11-20 06:55:57,976 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:55:58,116 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:55:59,097 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-20 06:55:59,718 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:55:59,757 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:55:59,967 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-20 06:56:00,166 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:56:00,307 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:56:00,309 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00 WrapperNode [2021-11-20 06:56:00,309 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:56:00,311 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:56:00,311 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:56:00,311 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:56:00,318 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,406 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,516 INFO L137 Inliner]: procedures = 163, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 3081 [2021-11-20 06:56:00,517 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:56:00,517 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:56:00,517 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:56:00,518 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:56:00,526 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,526 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,543 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,544 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,661 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,689 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,716 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,745 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:56:00,746 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:56:00,746 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:56:00,747 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:56:00,748 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (1/1) ... [2021-11-20 06:56:00,756 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:56:00,767 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:56:00,779 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:56:00,805 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:56:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-20 06:56:00,826 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-20 06:56:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2021-11-20 06:56:00,826 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2021-11-20 06:56:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2021-11-20 06:56:00,826 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2021-11-20 06:56:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2021-11-20 06:56:00,827 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2021-11-20 06:56:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-20 06:56:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2021-11-20 06:56:00,827 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2021-11-20 06:56:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 06:56:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 06:56:00,828 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-20 06:56:00,828 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-20 06:56:00,828 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 06:56:00,828 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 06:56:00,829 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-20 06:56:00,829 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-20 06:56:00,829 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-20 06:56:00,829 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-20 06:56:00,829 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-20 06:56:00,829 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-20 06:56:00,830 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-20 06:56:00,830 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 06:56:00,830 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 06:56:00,830 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-20 06:56:00,830 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-20 06:56:00,831 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-20 06:56:00,831 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-20 06:56:00,831 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 06:56:00,831 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 06:56:00,831 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-20 06:56:00,831 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-20 06:56:00,832 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-20 06:56:00,832 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-20 06:56:00,832 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-20 06:56:00,832 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-20 06:56:00,832 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-20 06:56:00,833 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-20 06:56:00,833 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 06:56:00,833 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 06:56:00,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-20 06:56:00,833 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 06:56:00,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 06:56:00,834 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2021-11-20 06:56:00,834 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2021-11-20 06:56:00,834 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-20 06:56:00,834 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-20 06:56:00,835 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2021-11-20 06:56:00,835 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2021-11-20 06:56:00,835 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 06:56:00,835 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 06:56:00,835 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-20 06:56:00,835 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-20 06:56:00,836 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 06:56:00,836 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 06:56:00,837 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 06:56:00,837 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 06:56:00,838 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 06:56:00,838 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-11-20 06:56:00,838 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-11-20 06:56:00,838 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-20 06:56:00,839 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-20 06:56:00,839 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:56:00,839 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-20 06:56:00,839 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-20 06:56:00,839 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-20 06:56:00,839 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-20 06:56:00,839 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 06:56:00,840 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 06:56:00,840 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:56:00,840 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:56:00,840 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-20 06:56:00,840 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-20 06:56:00,840 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2021-11-20 06:56:00,841 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2021-11-20 06:56:00,841 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 06:56:00,842 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-20 06:56:00,842 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-20 06:56:00,842 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-20 06:56:00,842 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-20 06:56:00,842 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 06:56:00,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 06:56:00,842 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2021-11-20 06:56:00,843 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2021-11-20 06:56:00,843 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-20 06:56:00,843 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-20 06:56:00,843 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-20 06:56:00,844 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-20 06:56:00,844 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 06:56:00,844 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-20 06:56:00,844 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-20 06:56:00,844 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-20 06:56:00,845 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-20 06:56:00,845 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-20 06:56:00,846 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-20 06:56:00,846 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-20 06:56:00,846 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-20 06:56:00,846 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-20 06:56:00,847 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-20 06:56:00,847 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:56:00,847 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:56:00,847 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-20 06:56:00,847 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-20 06:56:01,525 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:56:01,527 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:56:01,794 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 06:56:02,587 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-11-20 06:56:06,221 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:56:06,237 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:56:06,237 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-11-20 06:56:06,240 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:56:06 BoogieIcfgContainer [2021-11-20 06:56:06,241 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:56:06,243 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:56:06,243 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:56:06,250 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:56:06,250 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:55:57" (1/3) ... [2021-11-20 06:56:06,251 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a5eefb1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:56:06, skipping insertion in model container [2021-11-20 06:56:06,251 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:56:00" (2/3) ... [2021-11-20 06:56:06,252 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a5eefb1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:56:06, skipping insertion in model container [2021-11-20 06:56:06,252 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:56:06" (3/3) ... [2021-11-20 06:56:06,253 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 06:56:06,258 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:56:06,259 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:56:06,332 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:56:06,342 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:56:06,343 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:56:06,404 INFO L276 IsEmpty]: Start isEmpty. Operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2021-11-20 06:56:06,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-20 06:56:06,425 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:56:06,426 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:56:06,426 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:56:06,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:56:06,432 INFO L85 PathProgramCache]: Analyzing trace with hash -967497407, now seen corresponding path program 1 times [2021-11-20 06:56:06,444 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:56:06,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1218717046] [2021-11-20 06:56:06,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:56:06,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:56:06,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:07,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:56:07,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:07,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:56:07,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:07,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:56:07,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:07,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:56:07,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:07,122 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:56:07,122 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:56:07,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1218717046] [2021-11-20 06:56:07,124 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1218717046] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:56:07,124 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:56:07,124 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:56:07,127 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282458470] [2021-11-20 06:56:07,127 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:56:07,132 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:56:07,132 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:56:07,166 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:56:07,168 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:56:07,173 INFO L87 Difference]: Start difference. First operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 06:56:09,650 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:11,681 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:16,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:56:16,367 INFO L93 Difference]: Finished difference Result 2754 states and 4123 transitions. [2021-11-20 06:56:16,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:56:16,371 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2021-11-20 06:56:16,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:56:16,423 INFO L225 Difference]: With dead ends: 2754 [2021-11-20 06:56:16,423 INFO L226 Difference]: Without dead ends: 1880 [2021-11-20 06:56:16,440 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:56:16,444 INFO L933 BasicCegarLoop]: 1332 mSDtfsCounter, 1894 mSDsluCounter, 2182 mSDsCounter, 0 mSdLazyCounter, 1417 mSolverCounterSat, 1012 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2046 SdHoareTripleChecker+Valid, 3514 SdHoareTripleChecker+Invalid, 2431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1012 IncrementalHoareTripleChecker+Valid, 1417 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:56:16,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2046 Valid, 3514 Invalid, 2431 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1012 Valid, 1417 Invalid, 2 Unknown, 0 Unchecked, 8.8s Time] [2021-11-20 06:56:16,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1880 states. [2021-11-20 06:56:16,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1880 to 1612. [2021-11-20 06:56:16,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1612 states, 1197 states have (on average 1.3751044277360067) internal successors, (1646), 1229 states have internal predecessors, (1646), 332 states have call successors, (332), 83 states have call predecessors, (332), 82 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2021-11-20 06:56:16,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1612 states to 1612 states and 2305 transitions. [2021-11-20 06:56:16,760 INFO L78 Accepts]: Start accepts. Automaton has 1612 states and 2305 transitions. Word has length 44 [2021-11-20 06:56:16,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:56:16,761 INFO L470 AbstractCegarLoop]: Abstraction has 1612 states and 2305 transitions. [2021-11-20 06:56:16,762 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 06:56:16,762 INFO L276 IsEmpty]: Start isEmpty. Operand 1612 states and 2305 transitions. [2021-11-20 06:56:16,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-11-20 06:56:16,771 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:56:16,771 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:56:16,771 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 06:56:16,772 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:56:16,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:56:16,773 INFO L85 PathProgramCache]: Analyzing trace with hash -1415687837, now seen corresponding path program 1 times [2021-11-20 06:56:16,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:56:16,774 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [309576125] [2021-11-20 06:56:16,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:56:16,774 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:56:16,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:17,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:56:17,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:17,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:56:17,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:17,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:56:17,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:17,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:56:17,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:17,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:56:17,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:17,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 06:56:17,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:17,188 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-20 06:56:17,189 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:56:17,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [309576125] [2021-11-20 06:56:17,189 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [309576125] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:56:17,190 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:56:17,190 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:56:17,190 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1257072240] [2021-11-20 06:56:17,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:56:17,192 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:56:17,192 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:56:17,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:56:17,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:56:17,194 INFO L87 Difference]: Start difference. First operand 1612 states and 2305 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:56:19,482 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:21,505 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:24,964 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:26,995 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:30,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:56:30,401 INFO L93 Difference]: Finished difference Result 5349 states and 7945 transitions. [2021-11-20 06:56:30,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:56:30,402 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2021-11-20 06:56:30,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:56:30,436 INFO L225 Difference]: With dead ends: 5349 [2021-11-20 06:56:30,436 INFO L226 Difference]: Without dead ends: 3748 [2021-11-20 06:56:30,445 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:56:30,447 INFO L933 BasicCegarLoop]: 1365 mSDtfsCounter, 1950 mSDsluCounter, 2241 mSDsCounter, 0 mSdLazyCounter, 1438 mSolverCounterSat, 1011 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2078 SdHoareTripleChecker+Valid, 3606 SdHoareTripleChecker+Invalid, 2453 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1011 IncrementalHoareTripleChecker+Valid, 1438 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:56:30,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2078 Valid, 3606 Invalid, 2453 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1011 Valid, 1438 Invalid, 4 Unknown, 0 Unchecked, 12.8s Time] [2021-11-20 06:56:30,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3748 states. [2021-11-20 06:56:30,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3748 to 3286. [2021-11-20 06:56:30,631 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3286 states, 2434 states have (on average 1.3697617091207888) internal successors, (3334), 2504 states have internal predecessors, (3334), 671 states have call successors, (671), 165 states have call predecessors, (671), 180 states have return successors, (762), 642 states have call predecessors, (762), 666 states have call successors, (762) [2021-11-20 06:56:30,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3286 states to 3286 states and 4767 transitions. [2021-11-20 06:56:30,659 INFO L78 Accepts]: Start accepts. Automaton has 3286 states and 4767 transitions. Word has length 61 [2021-11-20 06:56:30,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:56:30,660 INFO L470 AbstractCegarLoop]: Abstraction has 3286 states and 4767 transitions. [2021-11-20 06:56:30,660 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:56:30,660 INFO L276 IsEmpty]: Start isEmpty. Operand 3286 states and 4767 transitions. [2021-11-20 06:56:30,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-11-20 06:56:30,665 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:56:30,666 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:56:30,666 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 06:56:30,666 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:56:30,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:56:30,670 INFO L85 PathProgramCache]: Analyzing trace with hash -937016713, now seen corresponding path program 1 times [2021-11-20 06:56:30,670 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:56:30,670 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [438573453] [2021-11-20 06:56:30,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:56:30,673 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:56:30,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:31,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:56:31,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:31,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:56:31,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:31,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:56:31,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:31,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:56:31,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:31,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:56:31,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:31,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 06:56:31,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:31,129 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-20 06:56:31,130 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:56:31,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [438573453] [2021-11-20 06:56:31,132 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [438573453] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:56:31,133 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:56:31,134 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:56:31,134 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [376817861] [2021-11-20 06:56:31,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:56:31,135 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:56:31,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:56:31,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:56:31,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:56:31,136 INFO L87 Difference]: Start difference. First operand 3286 states and 4767 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:56:33,411 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:35,444 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:39,770 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:41,795 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:44,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:56:44,027 INFO L93 Difference]: Finished difference Result 10731 states and 16197 transitions. [2021-11-20 06:56:44,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:56:44,034 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 62 [2021-11-20 06:56:44,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:56:44,101 INFO L225 Difference]: With dead ends: 10731 [2021-11-20 06:56:44,101 INFO L226 Difference]: Without dead ends: 7456 [2021-11-20 06:56:44,120 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:56:44,125 INFO L933 BasicCegarLoop]: 1304 mSDtfsCounter, 2006 mSDsluCounter, 2143 mSDsCounter, 0 mSdLazyCounter, 1405 mSolverCounterSat, 1033 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2143 SdHoareTripleChecker+Valid, 3447 SdHoareTripleChecker+Invalid, 2442 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1033 IncrementalHoareTripleChecker+Valid, 1405 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:56:44,127 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2143 Valid, 3447 Invalid, 2442 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1033 Valid, 1405 Invalid, 4 Unknown, 0 Unchecked, 12.5s Time] [2021-11-20 06:56:44,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7456 states. [2021-11-20 06:56:44,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7456 to 6627. [2021-11-20 06:56:44,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6627 states, 4901 states have (on average 1.3650275453988983) internal successors, (6690), 5047 states have internal predecessors, (6690), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-11-20 06:56:44,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6627 states to 6627 states and 9741 transitions. [2021-11-20 06:56:44,520 INFO L78 Accepts]: Start accepts. Automaton has 6627 states and 9741 transitions. Word has length 62 [2021-11-20 06:56:44,521 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:56:44,521 INFO L470 AbstractCegarLoop]: Abstraction has 6627 states and 9741 transitions. [2021-11-20 06:56:44,522 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:56:44,522 INFO L276 IsEmpty]: Start isEmpty. Operand 6627 states and 9741 transitions. [2021-11-20 06:56:44,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-20 06:56:44,525 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:56:44,525 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:56:44,525 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 06:56:44,526 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:56:44,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:56:44,527 INFO L85 PathProgramCache]: Analyzing trace with hash 1016891110, now seen corresponding path program 1 times [2021-11-20 06:56:44,527 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:56:44,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1568663360] [2021-11-20 06:56:44,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:56:44,528 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:56:44,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:44,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:56:44,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:44,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:56:44,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:44,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:56:44,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:44,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:56:44,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:44,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:56:44,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:44,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 06:56:44,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:44,820 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-20 06:56:44,821 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:56:44,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1568663360] [2021-11-20 06:56:44,821 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1568663360] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:56:44,821 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:56:44,821 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:56:44,822 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [152863699] [2021-11-20 06:56:44,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:56:44,822 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:56:44,822 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:56:44,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:56:44,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:56:44,823 INFO L87 Difference]: Start difference. First operand 6627 states and 9741 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:56:47,057 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:49,090 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:53,518 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:55,547 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:56:57,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:56:57,565 INFO L93 Difference]: Finished difference Result 7454 states and 11168 transitions. [2021-11-20 06:56:57,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:56:57,566 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 63 [2021-11-20 06:56:57,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:56:57,625 INFO L225 Difference]: With dead ends: 7454 [2021-11-20 06:56:57,625 INFO L226 Difference]: Without dead ends: 7451 [2021-11-20 06:56:57,630 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:56:57,631 INFO L933 BasicCegarLoop]: 1308 mSDtfsCounter, 2003 mSDsluCounter, 2150 mSDsCounter, 0 mSdLazyCounter, 1398 mSolverCounterSat, 1025 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2140 SdHoareTripleChecker+Valid, 3458 SdHoareTripleChecker+Invalid, 2427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1025 IncrementalHoareTripleChecker+Valid, 1398 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:56:57,632 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2140 Valid, 3458 Invalid, 2427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1025 Valid, 1398 Invalid, 4 Unknown, 0 Unchecked, 12.5s Time] [2021-11-20 06:56:57,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7451 states. [2021-11-20 06:56:58,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7451 to 6628. [2021-11-20 06:56:58,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6628 states, 4902 states have (on average 1.364953080375357) internal successors, (6691), 5048 states have internal predecessors, (6691), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-11-20 06:56:58,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6628 states to 6628 states and 9742 transitions. [2021-11-20 06:56:58,089 INFO L78 Accepts]: Start accepts. Automaton has 6628 states and 9742 transitions. Word has length 63 [2021-11-20 06:56:58,090 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:56:58,090 INFO L470 AbstractCegarLoop]: Abstraction has 6628 states and 9742 transitions. [2021-11-20 06:56:58,091 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:56:58,091 INFO L276 IsEmpty]: Start isEmpty. Operand 6628 states and 9742 transitions. [2021-11-20 06:56:58,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-11-20 06:56:58,093 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:56:58,093 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:56:58,094 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 06:56:58,094 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:56:58,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:56:58,095 INFO L85 PathProgramCache]: Analyzing trace with hash 1458496346, now seen corresponding path program 1 times [2021-11-20 06:56:58,095 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:56:58,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [391234228] [2021-11-20 06:56:58,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:56:58,095 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:56:58,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:58,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:56:58,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:58,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:56:58,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:58,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:56:58,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:58,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:56:58,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:58,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:56:58,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:58,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 06:56:58,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:56:58,345 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-20 06:56:58,346 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:56:58,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [391234228] [2021-11-20 06:56:58,346 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [391234228] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:56:58,346 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:56:58,346 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:56:58,347 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458997696] [2021-11-20 06:56:58,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:56:58,348 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:56:58,348 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:56:58,349 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:56:58,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:56:58,351 INFO L87 Difference]: Start difference. First operand 6628 states and 9742 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:57:00,617 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:02,653 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:05,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:57:05,380 INFO L93 Difference]: Finished difference Result 7450 states and 11164 transitions. [2021-11-20 06:57:05,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:57:05,381 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 64 [2021-11-20 06:57:05,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:57:05,456 INFO L225 Difference]: With dead ends: 7450 [2021-11-20 06:57:05,457 INFO L226 Difference]: Without dead ends: 7447 [2021-11-20 06:57:05,465 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:57:05,466 INFO L933 BasicCegarLoop]: 1128 mSDtfsCounter, 1541 mSDsluCounter, 1088 mSDsCounter, 0 mSdLazyCounter, 795 mSolverCounterSat, 574 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1682 SdHoareTripleChecker+Valid, 2216 SdHoareTripleChecker+Invalid, 1371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 574 IncrementalHoareTripleChecker+Valid, 795 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:57:05,466 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1682 Valid, 2216 Invalid, 1371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [574 Valid, 795 Invalid, 2 Unknown, 0 Unchecked, 6.8s Time] [2021-11-20 06:57:05,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7447 states. [2021-11-20 06:57:05,801 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7447 to 6627. [2021-11-20 06:57:05,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6627 states, 4902 states have (on average 1.364749082007344) internal successors, (6690), 5047 states have internal predecessors, (6690), 1348 states have call successors, (1348), 329 states have call predecessors, (1348), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-11-20 06:57:05,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6627 states to 6627 states and 9740 transitions. [2021-11-20 06:57:05,840 INFO L78 Accepts]: Start accepts. Automaton has 6627 states and 9740 transitions. Word has length 64 [2021-11-20 06:57:05,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:57:05,841 INFO L470 AbstractCegarLoop]: Abstraction has 6627 states and 9740 transitions. [2021-11-20 06:57:05,841 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:57:05,841 INFO L276 IsEmpty]: Start isEmpty. Operand 6627 states and 9740 transitions. [2021-11-20 06:57:05,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-20 06:57:05,844 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:57:05,844 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:57:05,844 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 06:57:05,845 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:57:05,845 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:57:05,845 INFO L85 PathProgramCache]: Analyzing trace with hash -2031605655, now seen corresponding path program 1 times [2021-11-20 06:57:05,845 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:57:05,846 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1426418867] [2021-11-20 06:57:05,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:57:05,846 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:57:05,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:06,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:06,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:06,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:57:06,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:06,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:57:06,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:06,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:57:06,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:06,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:57:06,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:06,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 06:57:06,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:06,149 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-20 06:57:06,149 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:57:06,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1426418867] [2021-11-20 06:57:06,150 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1426418867] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:57:06,150 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:57:06,150 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:57:06,150 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [85604584] [2021-11-20 06:57:06,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:57:06,151 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:57:06,151 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:57:06,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:57:06,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:57:06,152 INFO L87 Difference]: Start difference. First operand 6627 states and 9740 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:57:08,372 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:10,407 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:12,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:57:12,899 INFO L93 Difference]: Finished difference Result 7449 states and 11162 transitions. [2021-11-20 06:57:12,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:57:12,900 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2021-11-20 06:57:12,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:57:12,926 INFO L225 Difference]: With dead ends: 7449 [2021-11-20 06:57:12,926 INFO L226 Difference]: Without dead ends: 7417 [2021-11-20 06:57:12,935 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:57:12,936 INFO L933 BasicCegarLoop]: 1127 mSDtfsCounter, 1537 mSDsluCounter, 1090 mSDsCounter, 0 mSdLazyCounter, 791 mSolverCounterSat, 571 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1678 SdHoareTripleChecker+Valid, 2217 SdHoareTripleChecker+Invalid, 1364 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 571 IncrementalHoareTripleChecker+Valid, 791 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:57:12,936 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1678 Valid, 2217 Invalid, 1364 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [571 Valid, 791 Invalid, 2 Unknown, 0 Unchecked, 6.5s Time] [2021-11-20 06:57:12,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7417 states. [2021-11-20 06:57:13,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7417 to 6597. [2021-11-20 06:57:13,252 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6597 states, 4875 states have (on average 1.3645128205128205) internal successors, (6652), 5019 states have internal predecessors, (6652), 1345 states have call successors, (1345), 329 states have call predecessors, (1345), 376 states have return successors, (1696), 1302 states have call predecessors, (1696), 1342 states have call successors, (1696) [2021-11-20 06:57:13,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6597 states to 6597 states and 9693 transitions. [2021-11-20 06:57:13,280 INFO L78 Accepts]: Start accepts. Automaton has 6597 states and 9693 transitions. Word has length 65 [2021-11-20 06:57:13,282 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:57:13,282 INFO L470 AbstractCegarLoop]: Abstraction has 6597 states and 9693 transitions. [2021-11-20 06:57:13,282 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-11-20 06:57:13,282 INFO L276 IsEmpty]: Start isEmpty. Operand 6597 states and 9693 transitions. [2021-11-20 06:57:13,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-11-20 06:57:13,289 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:57:13,289 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:57:13,289 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 06:57:13,289 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:57:13,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:57:13,290 INFO L85 PathProgramCache]: Analyzing trace with hash 1428627121, now seen corresponding path program 1 times [2021-11-20 06:57:13,290 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:57:13,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1732189550] [2021-11-20 06:57:13,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:57:13,291 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:57:13,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:13,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:57:13,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:57:13,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:57:13,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-11-20 06:57:13,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:57:13,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 06:57:13,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-20 06:57:13,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-11-20 06:57:13,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:13,517 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-20 06:57:13,518 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:57:13,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1732189550] [2021-11-20 06:57:13,518 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1732189550] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:57:13,518 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:57:13,518 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:57:13,519 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1494426792] [2021-11-20 06:57:13,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:57:13,520 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:57:13,520 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:57:13,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:57:13,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:57:13,521 INFO L87 Difference]: Start difference. First operand 6597 states and 9693 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:57:15,720 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:17,759 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:22,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:57:22,079 INFO L93 Difference]: Finished difference Result 20473 states and 30444 transitions. [2021-11-20 06:57:22,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-20 06:57:22,092 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-11-20 06:57:22,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:57:22,164 INFO L225 Difference]: With dead ends: 20473 [2021-11-20 06:57:22,164 INFO L226 Difference]: Without dead ends: 13887 [2021-11-20 06:57:22,202 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:57:22,204 INFO L933 BasicCegarLoop]: 1523 mSDtfsCounter, 2133 mSDsluCounter, 2538 mSDsCounter, 0 mSdLazyCounter, 1547 mSolverCounterSat, 1599 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2271 SdHoareTripleChecker+Valid, 4061 SdHoareTripleChecker+Invalid, 3148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1599 IncrementalHoareTripleChecker+Valid, 1547 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:57:22,204 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2271 Valid, 4061 Invalid, 3148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1599 Valid, 1547 Invalid, 2 Unknown, 0 Unchecked, 8.0s Time] [2021-11-20 06:57:22,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13887 states. [2021-11-20 06:57:22,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13887 to 12437. [2021-11-20 06:57:23,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12437 states, 9104 states have (on average 1.3474297012302285) internal successors, (12267), 9423 states have internal predecessors, (12267), 2516 states have call successors, (2516), 623 states have call predecessors, (2516), 816 states have return successors, (3667), 2490 states have call predecessors, (3667), 2513 states have call successors, (3667) [2021-11-20 06:57:23,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12437 states to 12437 states and 18450 transitions. [2021-11-20 06:57:23,073 INFO L78 Accepts]: Start accepts. Automaton has 12437 states and 18450 transitions. Word has length 98 [2021-11-20 06:57:23,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:57:23,073 INFO L470 AbstractCegarLoop]: Abstraction has 12437 states and 18450 transitions. [2021-11-20 06:57:23,074 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:57:23,074 INFO L276 IsEmpty]: Start isEmpty. Operand 12437 states and 18450 transitions. [2021-11-20 06:57:23,084 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-11-20 06:57:23,085 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:57:23,085 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:57:23,085 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 06:57:23,085 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:57:23,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:57:23,086 INFO L85 PathProgramCache]: Analyzing trace with hash -173781947, now seen corresponding path program 1 times [2021-11-20 06:57:23,086 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:57:23,086 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [162340637] [2021-11-20 06:57:23,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:57:23,087 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:57:23,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:23,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:57:23,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:57:23,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:57:23,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:57:23,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 06:57:23,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-11-20 06:57:23,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-11-20 06:57:23,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-11-20 06:57:23,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:57:23,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 06:57:23,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:23,562 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2021-11-20 06:57:23,562 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:57:23,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [162340637] [2021-11-20 06:57:23,562 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [162340637] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:57:23,563 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:57:23,563 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-20 06:57:23,563 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1371197519] [2021-11-20 06:57:23,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:57:23,564 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-20 06:57:23,564 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:57:23,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-20 06:57:23,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:57:23,565 INFO L87 Difference]: Start difference. First operand 12437 states and 18450 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-20 06:57:25,942 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:27,975 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:30,007 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:35,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:57:35,128 INFO L93 Difference]: Finished difference Result 26283 states and 39189 transitions. [2021-11-20 06:57:35,128 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-20 06:57:35,129 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) Word has length 124 [2021-11-20 06:57:35,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:57:35,201 INFO L225 Difference]: With dead ends: 26283 [2021-11-20 06:57:35,201 INFO L226 Difference]: Without dead ends: 13868 [2021-11-20 06:57:35,259 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:57:35,259 INFO L933 BasicCegarLoop]: 1147 mSDtfsCounter, 680 mSDsluCounter, 5538 mSDsCounter, 0 mSdLazyCounter, 2138 mSolverCounterSat, 701 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 705 SdHoareTripleChecker+Valid, 6685 SdHoareTripleChecker+Invalid, 2842 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 701 IncrementalHoareTripleChecker+Valid, 2138 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:57:35,260 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [705 Valid, 6685 Invalid, 2842 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [701 Valid, 2138 Invalid, 3 Unknown, 0 Unchecked, 10.9s Time] [2021-11-20 06:57:35,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13868 states. [2021-11-20 06:57:36,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13868 to 12457. [2021-11-20 06:57:36,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12457 states, 9120 states have (on average 1.3468201754385964) internal successors, (12283), 9435 states have internal predecessors, (12283), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2021-11-20 06:57:36,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12457 states to 12457 states and 18474 transitions. [2021-11-20 06:57:36,310 INFO L78 Accepts]: Start accepts. Automaton has 12457 states and 18474 transitions. Word has length 124 [2021-11-20 06:57:36,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:57:36,310 INFO L470 AbstractCegarLoop]: Abstraction has 12457 states and 18474 transitions. [2021-11-20 06:57:36,311 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2021-11-20 06:57:36,311 INFO L276 IsEmpty]: Start isEmpty. Operand 12457 states and 18474 transitions. [2021-11-20 06:57:36,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2021-11-20 06:57:36,341 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:57:36,341 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:57:36,342 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 06:57:36,342 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:57:36,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:57:36,343 INFO L85 PathProgramCache]: Analyzing trace with hash 582365067, now seen corresponding path program 1 times [2021-11-20 06:57:36,343 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:57:36,343 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1761792611] [2021-11-20 06:57:36,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:57:36,344 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:57:36,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:36,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:57:36,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:57:36,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:57:36,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:57:36,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 06:57:36,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-11-20 06:57:36,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-11-20 06:57:36,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-11-20 06:57:36,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:57:36,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:36,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 06:57:36,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:36,875 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-11-20 06:57:36,875 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:57:36,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1761792611] [2021-11-20 06:57:36,876 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1761792611] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:57:36,876 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:57:36,876 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:57:36,876 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100977634] [2021-11-20 06:57:36,876 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:57:36,877 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:57:36,877 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:57:36,878 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:57:36,878 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:57:36,879 INFO L87 Difference]: Start difference. First operand 12457 states and 18474 transitions. Second operand has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:57:39,258 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:41,295 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:43,327 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:47,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:57:47,818 INFO L93 Difference]: Finished difference Result 26292 states and 39150 transitions. [2021-11-20 06:57:47,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 06:57:47,819 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 130 [2021-11-20 06:57:47,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:57:47,892 INFO L225 Difference]: With dead ends: 26292 [2021-11-20 06:57:47,892 INFO L226 Difference]: Without dead ends: 13838 [2021-11-20 06:57:47,941 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2021-11-20 06:57:47,941 INFO L933 BasicCegarLoop]: 1148 mSDtfsCounter, 678 mSDsluCounter, 4501 mSDsCounter, 0 mSdLazyCounter, 1917 mSolverCounterSat, 706 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 703 SdHoareTripleChecker+Valid, 5649 SdHoareTripleChecker+Invalid, 2626 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 706 IncrementalHoareTripleChecker+Valid, 1917 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:57:47,942 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [703 Valid, 5649 Invalid, 2626 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [706 Valid, 1917 Invalid, 3 Unknown, 0 Unchecked, 10.2s Time] [2021-11-20 06:57:47,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13838 states. [2021-11-20 06:57:48,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13838 to 12466. [2021-11-20 06:57:48,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12466 states, 9129 states have (on average 1.346478256106912) internal successors, (12292), 9444 states have internal predecessors, (12292), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2021-11-20 06:57:48,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12466 states to 12466 states and 18483 transitions. [2021-11-20 06:57:48,846 INFO L78 Accepts]: Start accepts. Automaton has 12466 states and 18483 transitions. Word has length 130 [2021-11-20 06:57:48,846 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:57:48,846 INFO L470 AbstractCegarLoop]: Abstraction has 12466 states and 18483 transitions. [2021-11-20 06:57:48,846 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:57:48,847 INFO L276 IsEmpty]: Start isEmpty. Operand 12466 states and 18483 transitions. [2021-11-20 06:57:48,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2021-11-20 06:57:48,861 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:57:48,861 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:57:48,861 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 06:57:48,861 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:57:48,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:57:48,862 INFO L85 PathProgramCache]: Analyzing trace with hash -413463987, now seen corresponding path program 1 times [2021-11-20 06:57:48,862 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:57:48,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [514809929] [2021-11-20 06:57:48,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:57:48,863 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:57:49,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:49,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:57:49,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:57:49,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:57:49,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 06:57:49,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:57:49,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-20 06:57:49,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 06:57:49,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-20 06:57:49,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:57:49,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:49,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 06:57:49,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,360 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-11-20 06:57:49,360 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:57:49,360 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [514809929] [2021-11-20 06:57:49,360 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [514809929] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:57:49,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1626402844] [2021-11-20 06:57:49,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:57:49,361 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:57:49,361 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:57:49,363 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:57:49,383 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 06:57:49,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:49,923 INFO L263 TraceCheckSpWp]: Trace formula consists of 1858 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-20 06:57:49,936 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:57:50,289 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2021-11-20 06:57:50,289 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 06:57:50,289 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1626402844] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:57:50,289 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:57:50,290 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2021-11-20 06:57:50,290 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1035633764] [2021-11-20 06:57:50,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:57:50,291 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:57:50,291 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:57:50,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:57:50,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2021-11-20 06:57:50,292 INFO L87 Difference]: Start difference. First operand 12466 states and 18483 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:57:50,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:57:50,928 INFO L93 Difference]: Finished difference Result 20320 states and 30035 transitions. [2021-11-20 06:57:50,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:57:50,928 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 131 [2021-11-20 06:57:50,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:57:50,979 INFO L225 Difference]: With dead ends: 20320 [2021-11-20 06:57:50,979 INFO L226 Difference]: Without dead ends: 7867 [2021-11-20 06:57:51,012 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2021-11-20 06:57:51,013 INFO L933 BasicCegarLoop]: 1195 mSDtfsCounter, 38 mSDsluCounter, 3576 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4771 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:57:51,015 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 4771 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:57:51,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7867 states. [2021-11-20 06:57:51,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7867 to 7640. [2021-11-20 06:57:51,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7640 states, 5599 states have (on average 1.342025361671727) internal successors, (7514), 5793 states have internal predecessors, (7514), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1510 states have call predecessors, (2172), 1530 states have call successors, (2172) [2021-11-20 06:57:51,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7640 states to 7640 states and 11219 transitions. [2021-11-20 06:57:51,493 INFO L78 Accepts]: Start accepts. Automaton has 7640 states and 11219 transitions. Word has length 131 [2021-11-20 06:57:51,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:57:51,493 INFO L470 AbstractCegarLoop]: Abstraction has 7640 states and 11219 transitions. [2021-11-20 06:57:51,494 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:57:51,494 INFO L276 IsEmpty]: Start isEmpty. Operand 7640 states and 11219 transitions. [2021-11-20 06:57:51,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2021-11-20 06:57:51,507 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:57:51,508 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:57:51,549 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 06:57:51,722 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-20 06:57:51,722 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:57:51,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:57:51,723 INFO L85 PathProgramCache]: Analyzing trace with hash 1984420258, now seen corresponding path program 1 times [2021-11-20 06:57:51,723 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:57:51,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739796267] [2021-11-20 06:57:51,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:57:51,723 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:57:51,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:57:51,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:57:51,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:57:51,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:57:51,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 06:57:51,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:57:51,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 06:57:51,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:57:51,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 06:57:51,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-11-20 06:57:51,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-20 06:57:51,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:51,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-11-20 06:57:52,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:52,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-11-20 06:57:52,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:52,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2021-11-20 06:57:52,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:57:52,025 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2021-11-20 06:57:52,026 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:57:52,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739796267] [2021-11-20 06:57:52,026 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739796267] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:57:52,026 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:57:52,026 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:57:52,027 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802260873] [2021-11-20 06:57:52,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:57:52,027 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:57:52,028 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:57:52,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:57:52,028 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:57:52,029 INFO L87 Difference]: Start difference. First operand 7640 states and 11219 transitions. Second operand has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 06:57:54,259 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:56,302 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:57:58,350 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:00,686 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:02,720 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:04,760 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:11,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:58:11,560 INFO L93 Difference]: Finished difference Result 22101 states and 33866 transitions. [2021-11-20 06:58:11,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-20 06:58:11,561 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 135 [2021-11-20 06:58:11,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:58:11,638 INFO L225 Difference]: With dead ends: 22101 [2021-11-20 06:58:11,638 INFO L226 Difference]: Without dead ends: 13897 [2021-11-20 06:58:11,665 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=88, Invalid=218, Unknown=0, NotChecked=0, Total=306 [2021-11-20 06:58:11,666 INFO L933 BasicCegarLoop]: 1634 mSDtfsCounter, 2458 mSDsluCounter, 4053 mSDsCounter, 0 mSdLazyCounter, 2939 mSolverCounterSat, 1772 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2613 SdHoareTripleChecker+Valid, 5687 SdHoareTripleChecker+Invalid, 4717 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1772 IncrementalHoareTripleChecker+Valid, 2939 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 18.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:58:11,667 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2613 Valid, 5687 Invalid, 4717 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1772 Valid, 2939 Invalid, 6 Unknown, 0 Unchecked, 18.8s Time] [2021-11-20 06:58:11,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13897 states. [2021-11-20 06:58:12,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13897 to 11472. [2021-11-20 06:58:12,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11472 states, 8339 states have (on average 1.337570452092577) internal successors, (11154), 8682 states have internal predecessors, (11154), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2306 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-11-20 06:58:12,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11472 states to 11472 states and 17695 transitions. [2021-11-20 06:58:12,521 INFO L78 Accepts]: Start accepts. Automaton has 11472 states and 17695 transitions. Word has length 135 [2021-11-20 06:58:12,521 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:58:12,522 INFO L470 AbstractCegarLoop]: Abstraction has 11472 states and 17695 transitions. [2021-11-20 06:58:12,522 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 06:58:12,522 INFO L276 IsEmpty]: Start isEmpty. Operand 11472 states and 17695 transitions. [2021-11-20 06:58:12,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2021-11-20 06:58:12,530 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:58:12,531 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:58:12,531 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 06:58:12,531 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:58:12,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:58:12,532 INFO L85 PathProgramCache]: Analyzing trace with hash 2017702408, now seen corresponding path program 1 times [2021-11-20 06:58:12,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:58:12,532 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [915479381] [2021-11-20 06:58:12,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:58:12,532 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:58:12,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:58:12,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:58:12,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:58:12,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:58:12,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 06:58:12,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:58:12,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-11-20 06:58:12,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 06:58:12,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-11-20 06:58:12,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-11-20 06:58:12,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:58:12,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:12,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:58:12,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:13,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 06:58:13,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:13,013 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-11-20 06:58:13,013 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:58:13,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [915479381] [2021-11-20 06:58:13,014 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [915479381] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:58:13,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [698496525] [2021-11-20 06:58:13,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:58:13,014 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:58:13,014 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:58:13,018 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:58:13,038 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 06:58:15,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:15,066 INFO L263 TraceCheckSpWp]: Trace formula consists of 1888 conjuncts, 54 conjunts are in the unsatisfiable core [2021-11-20 06:58:15,076 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:58:15,950 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 66 trivial. 0 not checked. [2021-11-20 06:58:15,950 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 06:58:15,950 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [698496525] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:58:15,950 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:58:15,951 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [9] total 21 [2021-11-20 06:58:15,951 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [343956785] [2021-11-20 06:58:15,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:58:15,952 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-20 06:58:15,952 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:58:15,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-20 06:58:15,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=378, Unknown=0, NotChecked=0, Total=420 [2021-11-20 06:58:15,953 INFO L87 Difference]: Start difference. First operand 11472 states and 17695 transitions. Second operand has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-11-20 06:58:18,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:58:18,924 INFO L93 Difference]: Finished difference Result 26085 states and 40613 transitions. [2021-11-20 06:58:18,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2021-11-20 06:58:18,925 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 137 [2021-11-20 06:58:18,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:58:19,000 INFO L225 Difference]: With dead ends: 26085 [2021-11-20 06:58:19,000 INFO L226 Difference]: Without dead ends: 14655 [2021-11-20 06:58:19,045 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 113 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=114, Invalid=1076, Unknown=0, NotChecked=0, Total=1190 [2021-11-20 06:58:19,046 INFO L933 BasicCegarLoop]: 2339 mSDtfsCounter, 2567 mSDsluCounter, 27401 mSDsCounter, 0 mSdLazyCounter, 1134 mSolverCounterSat, 208 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2654 SdHoareTripleChecker+Valid, 29740 SdHoareTripleChecker+Invalid, 1342 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 208 IncrementalHoareTripleChecker+Valid, 1134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:58:19,047 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2654 Valid, 29740 Invalid, 1342 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [208 Valid, 1134 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2021-11-20 06:58:19,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14655 states. [2021-11-20 06:58:19,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14655 to 11456. [2021-11-20 06:58:19,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11456 states, 8323 states have (on average 1.3366574552445032) internal successors, (11125), 8667 states have internal predecessors, (11125), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-11-20 06:58:19,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11456 states to 11456 states and 17666 transitions. [2021-11-20 06:58:19,929 INFO L78 Accepts]: Start accepts. Automaton has 11456 states and 17666 transitions. Word has length 137 [2021-11-20 06:58:19,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:58:19,930 INFO L470 AbstractCegarLoop]: Abstraction has 11456 states and 17666 transitions. [2021-11-20 06:58:19,930 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-11-20 06:58:19,930 INFO L276 IsEmpty]: Start isEmpty. Operand 11456 states and 17666 transitions. [2021-11-20 06:58:19,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2021-11-20 06:58:19,942 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:58:19,942 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:58:19,987 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 06:58:20,158 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-20 06:58:20,158 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:58:20,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:58:20,159 INFO L85 PathProgramCache]: Analyzing trace with hash -241354233, now seen corresponding path program 1 times [2021-11-20 06:58:20,159 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:58:20,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1125594176] [2021-11-20 06:58:20,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:58:20,159 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:58:20,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:58:20,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:58:20,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:58:20,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:58:20,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 06:58:20,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:58:20,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-11-20 06:58:20,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 06:58:20,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-11-20 06:58:20,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-11-20 06:58:20,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:58:20,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 06:58:20,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:58:20,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:58:20,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:58:20,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 06:58:20,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:20,699 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2021-11-20 06:58:20,699 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:58:20,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1125594176] [2021-11-20 06:58:20,700 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1125594176] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:58:20,700 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:58:20,700 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:58:20,700 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608998508] [2021-11-20 06:58:20,701 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:58:20,701 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:58:20,701 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:58:20,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:58:20,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:58:20,702 INFO L87 Difference]: Start difference. First operand 11456 states and 17666 transitions. Second operand has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 06:58:22,912 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:24,944 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:27,953 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:29,994 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:32,372 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:34,411 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:38,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:58:38,119 INFO L93 Difference]: Finished difference Result 29838 states and 46831 transitions. [2021-11-20 06:58:38,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 06:58:38,120 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 158 [2021-11-20 06:58:38,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:58:38,206 INFO L225 Difference]: With dead ends: 29838 [2021-11-20 06:58:38,207 INFO L226 Difference]: Without dead ends: 18424 [2021-11-20 06:58:38,247 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:58:38,247 INFO L933 BasicCegarLoop]: 1751 mSDtfsCounter, 2007 mSDsluCounter, 4608 mSDsCounter, 0 mSdLazyCounter, 1648 mSolverCounterSat, 1123 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2135 SdHoareTripleChecker+Valid, 6359 SdHoareTripleChecker+Invalid, 2777 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1123 IncrementalHoareTripleChecker+Valid, 1648 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:58:38,248 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2135 Valid, 6359 Invalid, 2777 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1123 Valid, 1648 Invalid, 6 Unknown, 0 Unchecked, 16.5s Time] [2021-11-20 06:58:38,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18424 states. [2021-11-20 06:58:39,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18424 to 11472. [2021-11-20 06:58:39,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11472 states, 8339 states have (on average 1.3360115121717233) internal successors, (11141), 8683 states have internal predecessors, (11141), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-11-20 06:58:39,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11472 states to 11472 states and 17682 transitions. [2021-11-20 06:58:39,142 INFO L78 Accepts]: Start accepts. Automaton has 11472 states and 17682 transitions. Word has length 158 [2021-11-20 06:58:39,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:58:39,143 INFO L470 AbstractCegarLoop]: Abstraction has 11472 states and 17682 transitions. [2021-11-20 06:58:39,143 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 06:58:39,143 INFO L276 IsEmpty]: Start isEmpty. Operand 11472 states and 17682 transitions. [2021-11-20 06:58:39,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2021-11-20 06:58:39,155 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:58:39,155 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:58:39,156 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-11-20 06:58:39,156 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:58:39,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:58:39,156 INFO L85 PathProgramCache]: Analyzing trace with hash -1447524416, now seen corresponding path program 1 times [2021-11-20 06:58:39,157 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:58:39,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1914582372] [2021-11-20 06:58:39,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:58:39,157 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:58:39,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:58:39,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:58:39,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:58:39,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:58:39,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 06:58:39,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:58:39,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-11-20 06:58:39,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 06:58:39,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-11-20 06:58:39,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-11-20 06:58:39,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:58:39,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:58:39,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 06:58:39,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-20 06:58:39,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:58:39,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:39,609 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2021-11-20 06:58:39,609 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:58:39,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1914582372] [2021-11-20 06:58:39,610 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1914582372] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:58:39,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [222391532] [2021-11-20 06:58:39,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:58:39,610 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:58:39,610 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:58:39,614 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:58:39,637 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-20 06:58:40,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:58:40,556 INFO L263 TraceCheckSpWp]: Trace formula consists of 1993 conjuncts, 12 conjunts are in the unsatisfiable core [2021-11-20 06:58:40,561 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:58:40,979 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-20 06:58:40,979 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:58:41,467 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2021-11-20 06:58:41,467 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [222391532] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:58:41,467 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 06:58:41,468 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 5, 5] total 15 [2021-11-20 06:58:41,468 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1612125320] [2021-11-20 06:58:41,468 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 06:58:41,469 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-20 06:58:41,469 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:58:41,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-20 06:58:41,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=162, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:58:41,474 INFO L87 Difference]: Start difference. First operand 11472 states and 17682 transitions. Second operand has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) [2021-11-20 06:58:44,127 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:58:49,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:58:49,866 INFO L93 Difference]: Finished difference Result 24483 states and 37808 transitions. [2021-11-20 06:58:49,866 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-20 06:58:49,867 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) Word has length 153 [2021-11-20 06:58:49,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:58:50,045 INFO L225 Difference]: With dead ends: 24483 [2021-11-20 06:58:50,045 INFO L226 Difference]: Without dead ends: 13017 [2021-11-20 06:58:50,065 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 350 GetRequests, 325 SyntacticMatches, 1 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 97 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=172, Invalid=478, Unknown=0, NotChecked=0, Total=650 [2021-11-20 06:58:50,066 INFO L933 BasicCegarLoop]: 1127 mSDtfsCounter, 761 mSDsluCounter, 5823 mSDsCounter, 0 mSdLazyCounter, 2130 mSolverCounterSat, 752 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 786 SdHoareTripleChecker+Valid, 6950 SdHoareTripleChecker+Invalid, 2883 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 752 IncrementalHoareTripleChecker+Valid, 2130 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:58:50,066 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [786 Valid, 6950 Invalid, 2883 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [752 Valid, 2130 Invalid, 1 Unknown, 0 Unchecked, 7.1s Time] [2021-11-20 06:58:50,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13017 states. [2021-11-20 06:58:50,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13017 to 11483. [2021-11-20 06:58:50,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11483 states, 8350 states have (on average 1.3355688622754491) internal successors, (11152), 8694 states have internal predecessors, (11152), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-11-20 06:58:50,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11483 states to 11483 states and 17693 transitions. [2021-11-20 06:58:50,712 INFO L78 Accepts]: Start accepts. Automaton has 11483 states and 17693 transitions. Word has length 153 [2021-11-20 06:58:50,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:58:50,713 INFO L470 AbstractCegarLoop]: Abstraction has 11483 states and 17693 transitions. [2021-11-20 06:58:50,713 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) [2021-11-20 06:58:50,713 INFO L276 IsEmpty]: Start isEmpty. Operand 11483 states and 17693 transitions. [2021-11-20 06:58:50,727 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2021-11-20 06:58:50,727 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:58:50,727 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:58:50,770 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-20 06:58:50,942 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:58:50,942 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:58:50,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:58:50,943 INFO L85 PathProgramCache]: Analyzing trace with hash 328420094, now seen corresponding path program 2 times [2021-11-20 06:58:50,943 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:58:50,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1369133027] [2021-11-20 06:58:50,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:58:50,943 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:58:51,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:58:51,441 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-20 06:58:51,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:58:52,009 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-20 06:58:52,010 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-20 06:58:52,011 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 06:58:52,012 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-11-20 06:58:52,016 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:58:52,020 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 06:58:52,075 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-20 06:58:52,344 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 06:58:52 BoogieIcfgContainer [2021-11-20 06:58:52,345 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 06:58:52,345 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 06:58:52,345 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 06:58:52,345 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 06:58:52,346 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:56:06" (3/4) ... [2021-11-20 06:58:52,349 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-20 06:58:52,349 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 06:58:52,350 INFO L158 Benchmark]: Toolchain (without parser) took 174389.17ms. Allocated memory was 88.1MB in the beginning and 1.5GB in the end (delta: 1.4GB). Free memory was 53.3MB in the beginning and 806.1MB in the end (delta: -752.8MB). Peak memory consumption was 661.9MB. Max. memory is 16.1GB. [2021-11-20 06:58:52,350 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 88.1MB. Free memory was 62.2MB in the beginning and 62.2MB in the end (delta: 44.2kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:58:52,350 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2348.15ms. Allocated memory was 88.1MB in the beginning and 142.6MB in the end (delta: 54.5MB). Free memory was 53.1MB in the beginning and 73.7MB in the end (delta: -20.6MB). Peak memory consumption was 58.8MB. Max. memory is 16.1GB. [2021-11-20 06:58:52,351 INFO L158 Benchmark]: Boogie Procedure Inliner took 206.12ms. Allocated memory is still 142.6MB. Free memory was 73.7MB in the beginning and 56.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 06:58:52,351 INFO L158 Benchmark]: Boogie Preprocessor took 227.82ms. Allocated memory is still 142.6MB. Free memory was 56.3MB in the beginning and 64.4MB in the end (delta: -8.1MB). Peak memory consumption was 10.7MB. Max. memory is 16.1GB. [2021-11-20 06:58:52,351 INFO L158 Benchmark]: RCFGBuilder took 5494.79ms. Allocated memory was 142.6MB in the beginning and 385.9MB in the end (delta: 243.3MB). Free memory was 64.4MB in the beginning and 275.2MB in the end (delta: -210.8MB). Peak memory consumption was 86.7MB. Max. memory is 16.1GB. [2021-11-20 06:58:52,352 INFO L158 Benchmark]: TraceAbstraction took 166102.08ms. Allocated memory was 385.9MB in the beginning and 1.5GB in the end (delta: 1.1GB). Free memory was 275.2MB in the beginning and 807.1MB in the end (delta: -532.0MB). Peak memory consumption was 585.8MB. Max. memory is 16.1GB. [2021-11-20 06:58:52,352 INFO L158 Benchmark]: Witness Printer took 3.95ms. Allocated memory is still 1.5GB. Free memory was 807.1MB in the beginning and 806.1MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 06:58:52,354 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 88.1MB. Free memory was 62.2MB in the beginning and 62.2MB in the end (delta: 44.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2348.15ms. Allocated memory was 88.1MB in the beginning and 142.6MB in the end (delta: 54.5MB). Free memory was 53.1MB in the beginning and 73.7MB in the end (delta: -20.6MB). Peak memory consumption was 58.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 206.12ms. Allocated memory is still 142.6MB. Free memory was 73.7MB in the beginning and 56.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 227.82ms. Allocated memory is still 142.6MB. Free memory was 56.3MB in the beginning and 64.4MB in the end (delta: -8.1MB). Peak memory consumption was 10.7MB. Max. memory is 16.1GB. * RCFGBuilder took 5494.79ms. Allocated memory was 142.6MB in the beginning and 385.9MB in the end (delta: 243.3MB). Free memory was 64.4MB in the beginning and 275.2MB in the end (delta: -210.8MB). Peak memory consumption was 86.7MB. Max. memory is 16.1GB. * TraceAbstraction took 166102.08ms. Allocated memory was 385.9MB in the beginning and 1.5GB in the end (delta: 1.1GB). Free memory was 275.2MB in the beginning and 807.1MB in the end (delta: -532.0MB). Peak memory consumption was 585.8MB. Max. memory is 16.1GB. * Witness Printer took 3.95ms. Allocated memory is still 1.5GB. Free memory was 807.1MB in the beginning and 806.1MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527, overapproximation of bitwiseAnd at line 8537. Possible FailurePath: [L7077] int LDV_IN_INTERRUPT = 1; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7079] int ldv_state_variable_2 ; [L7080] int ref_cnt ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L7082] int ldv_state_variable_1 ; [L7083] int usb_counter ; [L7084] struct sk_buff *usb_ops_group1 ; [L7085] int ldv_state_variable_0 ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L7170] static struct semaphore add_remove_card_sem ; [L7171] static struct usb_card_rec *usb_card ; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; [L8586] int ldv_retval_0 ; [L8587] int ldv_retval_4 ; [L8588] int ldv_retval_1 ; [L8592] int ldv_retval_3 ; [L8593] int ldv_retval_2 ; [L8989] int INTERF_STATE = 0; [L8990] int SERIAL_STATE = 0; [L8991] void *usb_intfdata = 0; [L8992] struct urb *usb_urb = 0; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8995] int completeFnIntCounter = 0; [L8996] int completeFnBulkCounter = 0; [L8997] void (*completeFnInt)(struct urb * ) ; [L8998] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor.flags=0, descriptor___0={171:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=-2, \result=-2, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=-2, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor.flags=0, descriptor___0={171:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND TRUE tmp != 0L [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, sem={161:0}, sem={161:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={163:0}, ldv_func_arg1={163:0}, ldv_func_arg2={4294967314:4294967299}, ldv_func_arg2={4294967314:4294967299}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor___0={171:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=-3, \result=-3, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=-3, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor___0={171:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND TRUE tmp___0 != 0L [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, tmp___0=-3, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, card->usb_boot_state=167, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result=173, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=173, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, card->rx_cmd.urb={-18446744073709551615:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg={163:0}, arg={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 857 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 165.7s, OverallIterations: 15, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 143.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 39 mSolverCounterUnknown, 23672 SdHoareTripleChecker+Valid, 133.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 22253 mSDsluCounter, 88360 SdHoareTripleChecker+Invalid, 125.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 68932 mSDsCounter, 12094 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 20715 IncrementalHoareTripleChecker+Invalid, 32848 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 12094 mSolverCounterUnsat, 19428 mSDtfsCounter, 20715 mSolverCounterSat, 0.6s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 989 GetRequests, 826 SyntacticMatches, 1 SemanticMatches, 162 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 315 ImplicationChecksByTransitivity, 3.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=12466occurred in iteration=9, InterpolantAutomatonStates: 137, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.6s AutomataMinimizationTime, 14 MinimizatonAttempts, 22592 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 4.4s SatisfiabilityAnalysisTime, 6.2s InterpolantComputationTime, 2002 NumberOfCodeBlocks, 2002 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1981 ConstructedInterpolants, 0 QuantifiedInterpolants, 4093 SizeOfPredicates, 28 NumberOfNonLiveVariables, 5739 ConjunctsInSsa, 81 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 938/943 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-20 06:58:52,527 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:58:54,822 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:58:54,825 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:58:54,876 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:58:54,877 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:58:54,883 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:58:54,884 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:58:54,887 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:58:54,892 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:58:54,896 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:58:54,897 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:58:54,898 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:58:54,905 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:58:54,909 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:58:54,911 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:58:54,914 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:58:54,920 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:58:54,921 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:58:54,924 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:58:54,929 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:58:54,934 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:58:54,937 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:58:54,940 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:58:54,943 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:58:54,951 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:58:54,952 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:58:54,952 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:58:54,955 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:58:54,956 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:58:54,957 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:58:54,959 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:58:54,960 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:58:54,962 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:58:54,963 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:58:54,988 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:58:54,989 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:58:54,990 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:58:54,990 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:58:54,991 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:58:54,993 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:58:54,994 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:58:55,000 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-20 06:58:55,057 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:58:55,060 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:58:55,061 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:58:55,061 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:58:55,062 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:58:55,062 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:58:55,064 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:58:55,064 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:58:55,065 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:58:55,065 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:58:55,066 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:58:55,067 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:58:55,067 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:58:55,067 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:58:55,068 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-11-20 06:58:55,068 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-20 06:58:55,068 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-20 06:58:55,068 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:58:55,069 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:58:55,069 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:58:55,069 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:58:55,069 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:58:55,070 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:58:55,070 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:58:55,070 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:58:55,071 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:58:55,071 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:58:55,071 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-20 06:58:55,071 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-20 06:58:55,072 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:58:55,072 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:58:55,072 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:58:55,073 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:58:55,073 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-20 06:58:55,073 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2021-11-20 06:58:55,479 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:58:55,526 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:58:55,529 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:58:55,534 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:58:55,535 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:58:55,536 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 06:58:55,636 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/2c2020649/90c7aceb02e94a6293b5a8d9be8eec35/FLAGffbfb9377 [2021-11-20 06:58:56,813 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:58:56,815 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 06:58:56,896 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/2c2020649/90c7aceb02e94a6293b5a8d9be8eec35/FLAGffbfb9377 [2021-11-20 06:58:57,052 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/data/2c2020649/90c7aceb02e94a6293b5a8d9be8eec35 [2021-11-20 06:58:57,056 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:58:57,059 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:58:57,061 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:58:57,061 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:58:57,066 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:58:57,067 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:58:57" (1/1) ... [2021-11-20 06:58:57,069 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@e23789 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:58:57, skipping insertion in model container [2021-11-20 06:58:57,070 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:58:57" (1/1) ... [2021-11-20 06:58:57,079 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:58:57,263 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:58:58,457 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-20 06:58:59,072 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:58:59,111 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-11-20 06:58:59,160 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:58:59,374 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-20 06:58:59,547 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:58:59,582 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:58:59,817 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-11-20 06:58:59,944 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:59:00,102 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:59:00,102 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00 WrapperNode [2021-11-20 06:59:00,102 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:59:00,104 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:59:00,104 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:59:00,104 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:59:00,111 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,238 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,407 INFO L137 Inliner]: procedures = 178, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 2976 [2021-11-20 06:59:00,408 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:59:00,409 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:59:00,409 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:59:00,409 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:59:00,418 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,418 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,450 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,451 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,567 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,596 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,624 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,678 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:59:00,679 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:59:00,679 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:59:00,680 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:59:00,680 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (1/1) ... [2021-11-20 06:59:00,698 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:59:00,709 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:59:00,732 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:59:00,765 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:59:00,783 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-11-20 06:59:00,783 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-11-20 06:59:00,783 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2021-11-20 06:59:00,784 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2021-11-20 06:59:00,784 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2021-11-20 06:59:00,784 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2021-11-20 06:59:00,784 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-20 06:59:00,784 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2021-11-20 06:59:00,785 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2021-11-20 06:59:00,785 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2021-11-20 06:59:00,785 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2021-11-20 06:59:00,785 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-20 06:59:00,785 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-20 06:59:00,785 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 06:59:00,786 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-20 06:59:00,786 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 06:59:00,786 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-11-20 06:59:00,786 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-11-20 06:59:00,786 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 06:59:00,786 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 06:59:00,816 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-20 06:59:00,816 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-20 06:59:00,816 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-11-20 06:59:00,817 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-11-20 06:59:00,817 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-20 06:59:00,817 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-20 06:59:00,817 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 06:59:00,817 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 06:59:00,817 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-11-20 06:59:00,817 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-11-20 06:59:00,817 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-20 06:59:00,818 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-20 06:59:00,818 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 06:59:00,818 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 06:59:00,818 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-20 06:59:00,818 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-20 06:59:00,818 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-20 06:59:00,818 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-20 06:59:00,818 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-20 06:59:00,819 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-20 06:59:00,819 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-11-20 06:59:00,819 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-11-20 06:59:00,819 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 06:59:00,819 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 06:59:00,819 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 06:59:00,819 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 06:59:00,819 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2021-11-20 06:59:00,820 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2021-11-20 06:59:00,820 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-20 06:59:00,820 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-11-20 06:59:00,820 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-11-20 06:59:00,820 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-20 06:59:00,820 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-20 06:59:00,820 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-20 06:59:00,820 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2021-11-20 06:59:00,820 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2021-11-20 06:59:00,821 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 06:59:00,821 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 06:59:00,821 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-11-20 06:59:00,821 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-11-20 06:59:00,821 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 06:59:00,821 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 06:59:00,821 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 06:59:00,821 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 06:59:00,822 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 06:59:00,822 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-11-20 06:59:00,822 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-11-20 06:59:00,822 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-20 06:59:00,822 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-20 06:59:00,822 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:59:00,822 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-11-20 06:59:00,822 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-11-20 06:59:00,822 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-20 06:59:00,823 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-20 06:59:00,823 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 06:59:00,823 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 06:59:00,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-20 06:59:00,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-20 06:59:00,823 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:59:00,823 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:59:00,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-20 06:59:00,824 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-11-20 06:59:00,824 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-11-20 06:59:00,824 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2021-11-20 06:59:00,824 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2021-11-20 06:59:00,824 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 06:59:00,824 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-11-20 06:59:00,824 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-11-20 06:59:00,824 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-11-20 06:59:00,825 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-20 06:59:00,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-20 06:59:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-20 06:59:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-20 06:59:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2021-11-20 06:59:00,826 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2021-11-20 06:59:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-20 06:59:00,826 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-20 06:59:00,826 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-20 06:59:00,826 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-20 06:59:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-20 06:59:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-11-20 06:59:00,827 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-11-20 06:59:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-20 06:59:00,827 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-20 06:59:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-11-20 06:59:00,827 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-11-20 06:59:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-20 06:59:00,827 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-20 06:59:00,828 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-20 06:59:00,828 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:59:00,828 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:59:00,828 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-11-20 06:59:00,828 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-11-20 06:59:01,416 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:59:01,422 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:59:02,227 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 06:59:08,692 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-11-20 06:59:19,619 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:59:19,640 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:59:19,641 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-11-20 06:59:19,644 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:59:19 BoogieIcfgContainer [2021-11-20 06:59:19,645 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:59:19,647 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:59:19,647 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:59:19,649 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:59:19,650 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:58:57" (1/3) ... [2021-11-20 06:59:19,651 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c125ecb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:59:19, skipping insertion in model container [2021-11-20 06:59:19,651 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:59:00" (2/3) ... [2021-11-20 06:59:19,651 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c125ecb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:59:19, skipping insertion in model container [2021-11-20 06:59:19,651 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:59:19" (3/3) ... [2021-11-20 06:59:19,653 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-11-20 06:59:19,658 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:59:19,658 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:59:19,713 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:59:19,719 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:59:19,719 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:59:19,758 INFO L276 IsEmpty]: Start isEmpty. Operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2021-11-20 06:59:19,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-20 06:59:19,775 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:19,776 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:19,776 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:19,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:19,782 INFO L85 PathProgramCache]: Analyzing trace with hash -967497407, now seen corresponding path program 1 times [2021-11-20 06:59:19,797 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:19,798 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [755526354] [2021-11-20 06:59:19,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:19,799 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:19,799 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:19,802 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:19,842 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-20 06:59:20,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:20,461 INFO L263 TraceCheckSpWp]: Trace formula consists of 736 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 06:59:20,467 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:20,838 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:59:20,839 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:21,221 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:59:21,222 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:21,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [755526354] [2021-11-20 06:59:21,222 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [755526354] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:59:21,223 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:59:21,223 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2021-11-20 06:59:21,224 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2059904062] [2021-11-20 06:59:21,225 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:59:21,236 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:59:21,237 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:21,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:59:21,267 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:59:21,271 INFO L87 Difference]: Start difference. First operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 6 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 06:59:21,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:21,665 INFO L93 Difference]: Finished difference Result 1714 states and 2513 transitions. [2021-11-20 06:59:21,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:59:21,668 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 6 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 44 [2021-11-20 06:59:21,668 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:21,698 INFO L225 Difference]: With dead ends: 1714 [2021-11-20 06:59:21,698 INFO L226 Difference]: Without dead ends: 848 [2021-11-20 06:59:21,710 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=25, Invalid=31, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:59:21,715 INFO L933 BasicCegarLoop]: 1217 mSDtfsCounter, 8 mSDsluCounter, 2431 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 3648 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:21,716 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 3648 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:59:21,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 848 states. [2021-11-20 06:59:21,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 848 to 848. [2021-11-20 06:59:21,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 848 states, 631 states have (on average 1.3724247226624406) internal successors, (866), 649 states have internal predecessors, (866), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2021-11-20 06:59:21,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 848 states to 848 states and 1209 transitions. [2021-11-20 06:59:21,866 INFO L78 Accepts]: Start accepts. Automaton has 848 states and 1209 transitions. Word has length 44 [2021-11-20 06:59:21,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:21,868 INFO L470 AbstractCegarLoop]: Abstraction has 848 states and 1209 transitions. [2021-11-20 06:59:21,868 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 6 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 06:59:21,868 INFO L276 IsEmpty]: Start isEmpty. Operand 848 states and 1209 transitions. [2021-11-20 06:59:21,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-11-20 06:59:21,876 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:21,877 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:21,898 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2021-11-20 06:59:22,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:22,095 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:22,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:22,096 INFO L85 PathProgramCache]: Analyzing trace with hash 543306113, now seen corresponding path program 1 times [2021-11-20 06:59:22,098 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:22,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1599324045] [2021-11-20 06:59:22,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:22,099 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:22,099 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:22,100 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:22,143 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-20 06:59:22,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:22,763 INFO L263 TraceCheckSpWp]: Trace formula consists of 746 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-20 06:59:22,766 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:23,083 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:59:23,083 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:23,741 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:59:23,741 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:23,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1599324045] [2021-11-20 06:59:23,742 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1599324045] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:59:23,742 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-20 06:59:23,742 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 10 [2021-11-20 06:59:23,742 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800862262] [2021-11-20 06:59:23,742 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-20 06:59:23,744 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 06:59:23,744 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:23,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 06:59:23,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 06:59:23,745 INFO L87 Difference]: Start difference. First operand 848 states and 1209 transitions. Second operand has 10 states, 10 states have (on average 3.6) internal successors, (36), 10 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 06:59:24,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:24,475 INFO L93 Difference]: Finished difference Result 1692 states and 2413 transitions. [2021-11-20 06:59:24,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 06:59:24,477 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 3.6) internal successors, (36), 10 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 46 [2021-11-20 06:59:24,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:24,486 INFO L225 Difference]: With dead ends: 1692 [2021-11-20 06:59:24,486 INFO L226 Difference]: Without dead ends: 852 [2021-11-20 06:59:24,490 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=71, Invalid=139, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:59:24,491 INFO L933 BasicCegarLoop]: 1200 mSDtfsCounter, 15 mSDsluCounter, 3595 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 4795 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:24,492 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 4795 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-20 06:59:24,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 852 states. [2021-11-20 06:59:24,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 852 to 852. [2021-11-20 06:59:24,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 852 states, 635 states have (on average 1.368503937007874) internal successors, (869), 653 states have internal predecessors, (869), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2021-11-20 06:59:24,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 852 states to 852 states and 1212 transitions. [2021-11-20 06:59:24,553 INFO L78 Accepts]: Start accepts. Automaton has 852 states and 1212 transitions. Word has length 46 [2021-11-20 06:59:24,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:24,554 INFO L470 AbstractCegarLoop]: Abstraction has 852 states and 1212 transitions. [2021-11-20 06:59:24,555 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 3.6) internal successors, (36), 10 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-11-20 06:59:24,556 INFO L276 IsEmpty]: Start isEmpty. Operand 852 states and 1212 transitions. [2021-11-20 06:59:24,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-11-20 06:59:24,560 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:24,561 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:24,588 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-20 06:59:24,782 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:24,782 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:24,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:24,783 INFO L85 PathProgramCache]: Analyzing trace with hash 726542785, now seen corresponding path program 2 times [2021-11-20 06:59:24,784 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:24,784 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1394410329] [2021-11-20 06:59:24,784 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 06:59:24,784 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:24,784 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:24,785 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:24,795 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-20 06:59:25,376 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-20 06:59:25,376 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 06:59:25,403 INFO L263 TraceCheckSpWp]: Trace formula consists of 698 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:59:25,406 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:25,616 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 06:59:25,617 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:25,843 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 06:59:25,844 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:25,844 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1394410329] [2021-11-20 06:59:25,844 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1394410329] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:59:25,844 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:59:25,844 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:59:25,845 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1967267372] [2021-11-20 06:59:25,845 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:59:25,846 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:59:25,846 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:25,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:59:25,847 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:59:25,847 INFO L87 Difference]: Start difference. First operand 852 states and 1212 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 06:59:29,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:29,970 INFO L93 Difference]: Finished difference Result 3232 states and 4619 transitions. [2021-11-20 06:59:29,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:59:29,973 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2021-11-20 06:59:29,973 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:30,040 INFO L225 Difference]: With dead ends: 3232 [2021-11-20 06:59:30,043 INFO L226 Difference]: Without dead ends: 2399 [2021-11-20 06:59:30,048 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:59:30,052 INFO L933 BasicCegarLoop]: 1631 mSDtfsCounter, 2998 mSDsluCounter, 1936 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 324 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2998 SdHoareTripleChecker+Valid, 3567 SdHoareTripleChecker+Invalid, 671 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 324 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:30,054 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2998 Valid, 3567 Invalid, 671 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [324 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2021-11-20 06:59:30,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2399 states. [2021-11-20 06:59:30,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2399 to 2399. [2021-11-20 06:59:30,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2399 states, 1784 states have (on average 1.373878923766816) internal successors, (2451), 1830 states have internal predecessors, (2451), 490 states have call successors, (490), 125 states have call predecessors, (490), 124 states have return successors, (485), 461 states have call predecessors, (485), 485 states have call successors, (485) [2021-11-20 06:59:30,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2399 states to 2399 states and 3426 transitions. [2021-11-20 06:59:30,186 INFO L78 Accepts]: Start accepts. Automaton has 2399 states and 3426 transitions. Word has length 48 [2021-11-20 06:59:30,187 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:30,187 INFO L470 AbstractCegarLoop]: Abstraction has 2399 states and 3426 transitions. [2021-11-20 06:59:30,188 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 06:59:30,188 INFO L276 IsEmpty]: Start isEmpty. Operand 2399 states and 3426 transitions. [2021-11-20 06:59:30,190 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-20 06:59:30,190 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:30,191 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:30,220 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-20 06:59:30,415 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:30,416 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:30,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:30,419 INFO L85 PathProgramCache]: Analyzing trace with hash 11952355, now seen corresponding path program 1 times [2021-11-20 06:59:30,421 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:30,421 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [937653324] [2021-11-20 06:59:30,422 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:30,422 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:30,422 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:30,423 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:30,469 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-20 06:59:31,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:31,477 INFO L263 TraceCheckSpWp]: Trace formula consists of 901 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 06:59:31,481 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:31,952 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 06:59:31,953 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:32,700 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:32,700 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:32,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [937653324] [2021-11-20 06:59:32,700 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [937653324] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:59:32,700 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:59:32,701 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-20 06:59:32,701 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1246075131] [2021-11-20 06:59:32,701 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:59:32,701 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:59:32,701 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:32,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:59:32,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:59:32,702 INFO L87 Difference]: Start difference. First operand 2399 states and 3426 transitions. Second operand has 8 states, 6 states have (on average 7.666666666666667) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-20 06:59:35,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:35,223 INFO L93 Difference]: Finished difference Result 5119 states and 7371 transitions. [2021-11-20 06:59:35,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:59:35,224 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 7.666666666666667) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 65 [2021-11-20 06:59:35,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:35,250 INFO L225 Difference]: With dead ends: 5119 [2021-11-20 06:59:35,251 INFO L226 Difference]: Without dead ends: 2746 [2021-11-20 06:59:35,262 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:59:35,265 INFO L933 BasicCegarLoop]: 1679 mSDtfsCounter, 451 mSDsluCounter, 9503 mSDsCounter, 0 mSdLazyCounter, 224 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 11182 SdHoareTripleChecker+Invalid, 290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 224 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 66 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:35,267 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [538 Valid, 11182 Invalid, 290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 224 Invalid, 0 Unknown, 66 Unchecked, 2.3s Time] [2021-11-20 06:59:35,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2746 states. [2021-11-20 06:59:35,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2746 to 2399. [2021-11-20 06:59:35,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2399 states, 1784 states have (on average 1.3733183856502242) internal successors, (2450), 1830 states have internal predecessors, (2450), 490 states have call successors, (490), 125 states have call predecessors, (490), 124 states have return successors, (485), 461 states have call predecessors, (485), 485 states have call successors, (485) [2021-11-20 06:59:35,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2399 states to 2399 states and 3425 transitions. [2021-11-20 06:59:35,495 INFO L78 Accepts]: Start accepts. Automaton has 2399 states and 3425 transitions. Word has length 65 [2021-11-20 06:59:35,497 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:35,497 INFO L470 AbstractCegarLoop]: Abstraction has 2399 states and 3425 transitions. [2021-11-20 06:59:35,497 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 7.666666666666667) internal successors, (46), 7 states have internal predecessors, (46), 4 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-20 06:59:35,498 INFO L276 IsEmpty]: Start isEmpty. Operand 2399 states and 3425 transitions. [2021-11-20 06:59:35,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-20 06:59:35,502 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:35,502 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:35,541 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-20 06:59:35,726 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:35,727 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:35,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:35,727 INFO L85 PathProgramCache]: Analyzing trace with hash 230807073, now seen corresponding path program 1 times [2021-11-20 06:59:35,728 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:35,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1744183690] [2021-11-20 06:59:35,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:35,729 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:35,729 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:35,730 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:35,731 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-20 06:59:36,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:36,597 INFO L263 TraceCheckSpWp]: Trace formula consists of 901 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 06:59:36,601 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:37,901 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:37,901 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:38,448 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:38,448 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:38,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1744183690] [2021-11-20 06:59:38,448 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1744183690] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:59:38,448 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:59:38,449 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 4 [2021-11-20 06:59:38,449 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1521305798] [2021-11-20 06:59:38,449 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:59:38,449 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:59:38,449 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:38,450 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:59:38,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:59:38,450 INFO L87 Difference]: Start difference. First operand 2399 states and 3425 transitions. Second operand has 4 states, 4 states have (on average 19.75) internal successors, (79), 4 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:59:39,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:39,695 INFO L93 Difference]: Finished difference Result 7146 states and 10414 transitions. [2021-11-20 06:59:39,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:59:39,697 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 19.75) internal successors, (79), 4 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 65 [2021-11-20 06:59:39,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:39,737 INFO L225 Difference]: With dead ends: 7146 [2021-11-20 06:59:39,738 INFO L226 Difference]: Without dead ends: 4773 [2021-11-20 06:59:39,750 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 126 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:59:39,751 INFO L933 BasicCegarLoop]: 1433 mSDtfsCounter, 2006 mSDsluCounter, 1176 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 363 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2006 SdHoareTripleChecker+Valid, 2609 SdHoareTripleChecker+Invalid, 383 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 363 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:39,751 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2006 Valid, 2609 Invalid, 383 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [363 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-11-20 06:59:39,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4773 states. [2021-11-20 06:59:40,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4773 to 4761. [2021-11-20 06:59:40,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4761 states, 3544 states have (on average 1.3733069977426637) internal successors, (4867), 3632 states have internal predecessors, (4867), 970 states have call successors, (970), 247 states have call predecessors, (970), 246 states have return successors, (1044), 917 states have call predecessors, (1044), 965 states have call successors, (1044) [2021-11-20 06:59:40,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4761 states to 4761 states and 6881 transitions. [2021-11-20 06:59:40,087 INFO L78 Accepts]: Start accepts. Automaton has 4761 states and 6881 transitions. Word has length 65 [2021-11-20 06:59:40,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:40,089 INFO L470 AbstractCegarLoop]: Abstraction has 4761 states and 6881 transitions. [2021-11-20 06:59:40,090 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 19.75) internal successors, (79), 4 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:59:40,090 INFO L276 IsEmpty]: Start isEmpty. Operand 4761 states and 6881 transitions. [2021-11-20 06:59:40,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-11-20 06:59:40,093 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:40,095 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:40,129 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-20 06:59:40,318 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:40,318 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:40,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:40,319 INFO L85 PathProgramCache]: Analyzing trace with hash -1435282055, now seen corresponding path program 1 times [2021-11-20 06:59:40,320 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:40,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1752823566] [2021-11-20 06:59:40,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:40,321 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:40,321 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:40,322 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:40,323 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-20 06:59:41,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:41,319 INFO L263 TraceCheckSpWp]: Trace formula consists of 902 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 06:59:41,322 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:43,077 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:43,078 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:43,833 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:43,833 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:43,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1752823566] [2021-11-20 06:59:43,834 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1752823566] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:59:43,834 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:59:43,834 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 4 [2021-11-20 06:59:43,834 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1449743600] [2021-11-20 06:59:43,834 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:59:43,835 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:59:43,835 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:43,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:59:43,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:59:43,836 INFO L87 Difference]: Start difference. First operand 4761 states and 6881 transitions. Second operand has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:59:49,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:49,352 INFO L93 Difference]: Finished difference Result 18916 states and 27976 transitions. [2021-11-20 06:59:49,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:59:49,353 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 66 [2021-11-20 06:59:49,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:49,483 INFO L225 Difference]: With dead ends: 18916 [2021-11-20 06:59:49,483 INFO L226 Difference]: Without dead ends: 14181 [2021-11-20 06:59:49,516 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 128 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:59:49,517 INFO L933 BasicCegarLoop]: 1547 mSDtfsCounter, 3127 mSDsluCounter, 2000 mSDsCounter, 0 mSdLazyCounter, 352 mSolverCounterSat, 363 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3127 SdHoareTripleChecker+Valid, 3547 SdHoareTripleChecker+Invalid, 715 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 363 IncrementalHoareTripleChecker+Valid, 352 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:49,517 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3127 Valid, 3547 Invalid, 715 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [363 Valid, 352 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2021-11-20 06:59:49,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14181 states. [2021-11-20 06:59:50,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14181 to 14152. [2021-11-20 06:59:50,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14152 states, 10533 states have (on average 1.3706446406531851) internal successors, (14437), 10791 states have internal predecessors, (14437), 2884 states have call successors, (2884), 735 states have call predecessors, (2884), 734 states have return successors, (3281), 2733 states have call predecessors, (3281), 2879 states have call successors, (3281) [2021-11-20 06:59:50,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14152 states to 14152 states and 20602 transitions. [2021-11-20 06:59:50,620 INFO L78 Accepts]: Start accepts. Automaton has 14152 states and 20602 transitions. Word has length 66 [2021-11-20 06:59:50,621 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:50,621 INFO L470 AbstractCegarLoop]: Abstraction has 14152 states and 20602 transitions. [2021-11-20 06:59:50,622 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 3 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:59:50,622 INFO L276 IsEmpty]: Start isEmpty. Operand 14152 states and 20602 transitions. [2021-11-20 06:59:50,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-20 06:59:50,626 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:50,626 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:50,669 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-20 06:59:50,842 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:50,842 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:50,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:50,843 INFO L85 PathProgramCache]: Analyzing trace with hash -1544432604, now seen corresponding path program 1 times [2021-11-20 06:59:50,845 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:50,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2093095198] [2021-11-20 06:59:50,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:50,845 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:50,846 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:50,848 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:50,862 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-20 06:59:51,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:51,764 INFO L263 TraceCheckSpWp]: Trace formula consists of 903 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:59:51,766 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:52,518 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:52,518 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:52,955 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:52,955 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:52,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2093095198] [2021-11-20 06:59:52,955 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2093095198] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:59:52,955 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:59:52,955 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-20 06:59:52,955 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659278850] [2021-11-20 06:59:52,956 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:59:52,956 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:59:52,956 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:52,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:59:52,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:59:52,957 INFO L87 Difference]: Start difference. First operand 14152 states and 20602 transitions. Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-20 06:59:53,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:53,431 INFO L93 Difference]: Finished difference Result 14176 states and 20626 transitions. [2021-11-20 06:59:53,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:59:53,432 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) Word has length 67 [2021-11-20 06:59:53,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:53,525 INFO L225 Difference]: With dead ends: 14176 [2021-11-20 06:59:53,525 INFO L226 Difference]: Without dead ends: 14173 [2021-11-20 06:59:53,535 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:59:53,536 INFO L933 BasicCegarLoop]: 1385 mSDtfsCounter, 1156 mSDsluCounter, 1173 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1156 SdHoareTripleChecker+Valid, 2558 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:53,536 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1156 Valid, 2558 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:59:53,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14173 states. [2021-11-20 06:59:54,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14173 to 14170. [2021-11-20 06:59:54,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14170 states, 10551 states have (on average 1.3701070988531894) internal successors, (14456), 10807 states have internal predecessors, (14456), 2884 states have call successors, (2884), 735 states have call predecessors, (2884), 734 states have return successors, (3281), 2735 states have call predecessors, (3281), 2879 states have call successors, (3281) [2021-11-20 06:59:54,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14170 states to 14170 states and 20621 transitions. [2021-11-20 06:59:54,525 INFO L78 Accepts]: Start accepts. Automaton has 14170 states and 20621 transitions. Word has length 67 [2021-11-20 06:59:54,526 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:54,526 INFO L470 AbstractCegarLoop]: Abstraction has 14170 states and 20621 transitions. [2021-11-20 06:59:54,526 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-20 06:59:54,526 INFO L276 IsEmpty]: Start isEmpty. Operand 14170 states and 20621 transitions. [2021-11-20 06:59:54,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-11-20 06:59:54,529 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:54,529 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:54,570 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-20 06:59:54,754 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:54,754 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:54,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:54,755 INFO L85 PathProgramCache]: Analyzing trace with hash -633127460, now seen corresponding path program 1 times [2021-11-20 06:59:54,756 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:54,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2011444460] [2021-11-20 06:59:54,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:54,756 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:54,757 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:54,757 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:54,759 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-20 06:59:55,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:55,631 INFO L263 TraceCheckSpWp]: Trace formula consists of 904 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:59:55,634 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:59:56,354 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:56,355 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:59:56,820 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 06:59:56,820 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:59:56,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2011444460] [2021-11-20 06:59:56,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2011444460] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:59:56,820 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:59:56,820 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-20 06:59:56,821 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1815940362] [2021-11-20 06:59:56,821 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:59:56,821 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:59:56,821 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:59:56,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:59:56,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:59:56,822 INFO L87 Difference]: Start difference. First operand 14170 states and 20621 transitions. Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-20 06:59:57,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:59:57,274 INFO L93 Difference]: Finished difference Result 14172 states and 20622 transitions. [2021-11-20 06:59:57,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:59:57,275 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) Word has length 68 [2021-11-20 06:59:57,275 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:59:57,363 INFO L225 Difference]: With dead ends: 14172 [2021-11-20 06:59:57,363 INFO L226 Difference]: Without dead ends: 14169 [2021-11-20 06:59:57,371 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 133 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:59:57,372 INFO L933 BasicCegarLoop]: 1197 mSDtfsCounter, 1145 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1145 SdHoareTripleChecker+Valid, 1197 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:59:57,372 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1145 Valid, 1197 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:59:57,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14169 states. [2021-11-20 06:59:58,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14169 to 14169. [2021-11-20 06:59:58,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14169 states, 10551 states have (on average 1.370012321107004) internal successors, (14455), 10806 states have internal predecessors, (14455), 2883 states have call successors, (2883), 735 states have call predecessors, (2883), 734 states have return successors, (3281), 2735 states have call predecessors, (3281), 2879 states have call successors, (3281) [2021-11-20 06:59:58,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14169 states to 14169 states and 20619 transitions. [2021-11-20 06:59:58,306 INFO L78 Accepts]: Start accepts. Automaton has 14169 states and 20619 transitions. Word has length 68 [2021-11-20 06:59:58,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:59:58,308 INFO L470 AbstractCegarLoop]: Abstraction has 14169 states and 20619 transitions. [2021-11-20 06:59:58,308 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-20 06:59:58,308 INFO L276 IsEmpty]: Start isEmpty. Operand 14169 states and 20619 transitions. [2021-11-20 06:59:58,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-11-20 06:59:58,310 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:59:58,311 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:59:58,351 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-20 06:59:58,530 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:59:58,530 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:59:58,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:59:58,531 INFO L85 PathProgramCache]: Analyzing trace with hash 1847533095, now seen corresponding path program 1 times [2021-11-20 06:59:58,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:59:58,532 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [364391730] [2021-11-20 06:59:58,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:59:58,532 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:59:58,533 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:59:58,533 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:59:58,536 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-20 06:59:59,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:59:59,413 INFO L263 TraceCheckSpWp]: Trace formula consists of 905 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:59:59,416 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:00,092 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 07:00:00,092 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:00,562 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 07:00:00,562 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:00,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [364391730] [2021-11-20 07:00:00,563 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [364391730] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:00,563 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:00,563 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-20 07:00:00,563 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677708781] [2021-11-20 07:00:00,563 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:00,564 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:00:00,564 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:00,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:00:00,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:00,565 INFO L87 Difference]: Start difference. First operand 14169 states and 20619 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-20 07:00:01,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:01,038 INFO L93 Difference]: Finished difference Result 14171 states and 20620 transitions. [2021-11-20 07:00:01,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:00:01,038 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) Word has length 69 [2021-11-20 07:00:01,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:01,123 INFO L225 Difference]: With dead ends: 14171 [2021-11-20 07:00:01,124 INFO L226 Difference]: Without dead ends: 14139 [2021-11-20 07:00:01,136 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 135 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:01,137 INFO L933 BasicCegarLoop]: 1196 mSDtfsCounter, 1142 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1142 SdHoareTripleChecker+Valid, 1196 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:01,138 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1142 Valid, 1196 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:00:01,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14139 states. [2021-11-20 07:00:02,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14139 to 14139. [2021-11-20 07:00:02,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14139 states, 10524 states have (on average 1.3699163816039528) internal successors, (14417), 10778 states have internal predecessors, (14417), 2880 states have call successors, (2880), 735 states have call predecessors, (2880), 734 states have return successors, (3276), 2733 states have call predecessors, (3276), 2877 states have call successors, (3276) [2021-11-20 07:00:02,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14139 states to 14139 states and 20573 transitions. [2021-11-20 07:00:02,265 INFO L78 Accepts]: Start accepts. Automaton has 14139 states and 20573 transitions. Word has length 69 [2021-11-20 07:00:02,265 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:02,265 INFO L470 AbstractCegarLoop]: Abstraction has 14139 states and 20573 transitions. [2021-11-20 07:00:02,266 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 1 states have call predecessors, (12), 1 states have call successors, (12) [2021-11-20 07:00:02,266 INFO L276 IsEmpty]: Start isEmpty. Operand 14139 states and 20573 transitions. [2021-11-20 07:00:02,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2021-11-20 07:00:02,282 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:02,283 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:02,317 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:02,506 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:00:02,506 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:02,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:02,507 INFO L85 PathProgramCache]: Analyzing trace with hash 1553347695, now seen corresponding path program 1 times [2021-11-20 07:00:02,509 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:00:02,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1069621030] [2021-11-20 07:00:02,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:02,509 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:00:02,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:00:02,511 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:00:02,557 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-20 07:00:03,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:03,662 INFO L263 TraceCheckSpWp]: Trace formula consists of 1004 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 07:00:03,666 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:04,221 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 07:00:04,221 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:04,614 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-20 07:00:04,614 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:04,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1069621030] [2021-11-20 07:00:04,615 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1069621030] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:04,615 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:04,615 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-20 07:00:04,615 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [428680268] [2021-11-20 07:00:04,615 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:04,616 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:00:04,616 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:04,616 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:00:04,616 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:04,617 INFO L87 Difference]: Start difference. First operand 14139 states and 20573 transitions. Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 07:00:06,056 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.18s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 07:00:06,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:06,984 INFO L93 Difference]: Finished difference Result 38561 states and 55724 transitions. [2021-11-20 07:00:06,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:00:06,991 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 102 [2021-11-20 07:00:06,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:07,131 INFO L225 Difference]: With dead ends: 38561 [2021-11-20 07:00:07,131 INFO L226 Difference]: Without dead ends: 24448 [2021-11-20 07:00:07,204 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 201 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:07,205 INFO L933 BasicCegarLoop]: 1603 mSDtfsCounter, 872 mSDsluCounter, 1149 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 872 SdHoareTripleChecker+Valid, 2752 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:07,206 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [872 Valid, 2752 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2021-11-20 07:00:07,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24448 states. [2021-11-20 07:00:08,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24448 to 24400. [2021-11-20 07:00:08,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24400 states, 18069 states have (on average 1.3602855719740994) internal successors, (24579), 18544 states have internal predecessors, (24579), 4942 states have call successors, (4942), 1389 states have call predecessors, (4942), 1388 states have return successors, (5593), 4664 states have call predecessors, (5593), 4939 states have call successors, (5593) [2021-11-20 07:00:08,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24400 states to 24400 states and 35114 transitions. [2021-11-20 07:00:08,894 INFO L78 Accepts]: Start accepts. Automaton has 24400 states and 35114 transitions. Word has length 102 [2021-11-20 07:00:08,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:08,895 INFO L470 AbstractCegarLoop]: Abstraction has 24400 states and 35114 transitions. [2021-11-20 07:00:08,895 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-11-20 07:00:08,895 INFO L276 IsEmpty]: Start isEmpty. Operand 24400 states and 35114 transitions. [2021-11-20 07:00:08,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2021-11-20 07:00:08,909 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:08,909 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:08,949 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:09,134 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:00:09,134 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:09,134 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:09,135 INFO L85 PathProgramCache]: Analyzing trace with hash -1390336057, now seen corresponding path program 1 times [2021-11-20 07:00:09,136 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:00:09,136 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1450972142] [2021-11-20 07:00:09,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:09,137 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:00:09,137 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:00:09,138 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:00:09,178 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-20 07:00:10,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:10,268 INFO L263 TraceCheckSpWp]: Trace formula consists of 1073 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 07:00:10,271 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:10,838 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-20 07:00:10,838 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:11,281 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-11-20 07:00:11,281 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:11,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1450972142] [2021-11-20 07:00:11,282 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1450972142] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:11,282 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:11,282 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-20 07:00:11,282 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [380889616] [2021-11-20 07:00:11,282 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:11,283 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:00:11,283 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:11,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:00:11,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:00:11,284 INFO L87 Difference]: Start difference. First operand 24400 states and 35114 transitions. Second operand has 5 states, 5 states have (on average 20.2) internal successors, (101), 5 states have internal predecessors, (101), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-20 07:00:13,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:13,067 INFO L93 Difference]: Finished difference Result 42667 states and 61279 transitions. [2021-11-20 07:00:13,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:00:13,067 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 5 states have internal predecessors, (101), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 128 [2021-11-20 07:00:13,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:13,357 INFO L225 Difference]: With dead ends: 42667 [2021-11-20 07:00:13,357 INFO L226 Difference]: Without dead ends: 18283 [2021-11-20 07:00:13,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 251 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:00:13,424 INFO L933 BasicCegarLoop]: 1194 mSDtfsCounter, 38 mSDsluCounter, 3573 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4767 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:13,424 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 4767 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-11-20 07:00:13,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18283 states. [2021-11-20 07:00:14,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18283 to 18108. [2021-11-20 07:00:14,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18108 states, 13406 states have (on average 1.3575264806802925) internal successors, (18199), 13764 states have internal predecessors, (18199), 3652 states have call successors, (3652), 1050 states have call predecessors, (3652), 1049 states have return successors, (4099), 3440 states have call predecessors, (4099), 3649 states have call successors, (4099) [2021-11-20 07:00:14,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18108 states to 18108 states and 25950 transitions. [2021-11-20 07:00:14,692 INFO L78 Accepts]: Start accepts. Automaton has 18108 states and 25950 transitions. Word has length 128 [2021-11-20 07:00:14,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:14,692 INFO L470 AbstractCegarLoop]: Abstraction has 18108 states and 25950 transitions. [2021-11-20 07:00:14,693 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 5 states have internal predecessors, (101), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-11-20 07:00:14,693 INFO L276 IsEmpty]: Start isEmpty. Operand 18108 states and 25950 transitions. [2021-11-20 07:00:14,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-11-20 07:00:14,713 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:14,713 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:14,755 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:14,934 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:00:14,935 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:14,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:14,936 INFO L85 PathProgramCache]: Analyzing trace with hash -1851619390, now seen corresponding path program 1 times [2021-11-20 07:00:14,938 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:00:14,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1694440962] [2021-11-20 07:00:14,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:14,938 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:00:14,938 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:00:14,940 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:00:14,982 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-20 07:00:16,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:16,416 INFO L263 TraceCheckSpWp]: Trace formula consists of 1094 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 07:00:16,420 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:17,117 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2021-11-20 07:00:17,117 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:18,055 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2021-11-20 07:00:18,055 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:18,055 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1694440962] [2021-11-20 07:00:18,056 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1694440962] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:18,056 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:18,056 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-20 07:00:18,056 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595832191] [2021-11-20 07:00:18,056 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:18,057 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 07:00:18,057 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:18,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 07:00:18,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:00:18,059 INFO L87 Difference]: Start difference. First operand 18108 states and 25950 transitions. Second operand has 8 states, 6 states have (on average 18.0) internal successors, (108), 7 states have internal predecessors, (108), 4 states have call successors, (19), 2 states have call predecessors, (19), 4 states have return successors, (18), 3 states have call predecessors, (18), 4 states have call successors, (18) [2021-11-20 07:00:21,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:21,221 INFO L93 Difference]: Finished difference Result 34562 states and 49576 transitions. [2021-11-20 07:00:21,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:00:21,222 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 18.0) internal successors, (108), 7 states have internal predecessors, (108), 4 states have call successors, (19), 2 states have call predecessors, (19), 4 states have return successors, (18), 3 states have call predecessors, (18), 4 states have call successors, (18) Word has length 134 [2021-11-20 07:00:21,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:21,316 INFO L225 Difference]: With dead ends: 34562 [2021-11-20 07:00:21,316 INFO L226 Difference]: Without dead ends: 18129 [2021-11-20 07:00:21,371 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 260 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:00:21,372 INFO L933 BasicCegarLoop]: 1444 mSDtfsCounter, 435 mSDsluCounter, 5234 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 520 SdHoareTripleChecker+Valid, 6678 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 60 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:21,372 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [520 Valid, 6678 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 116 Invalid, 0 Unknown, 60 Unchecked, 2.2s Time] [2021-11-20 07:00:21,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18129 states. [2021-11-20 07:00:22,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18129 to 18108. [2021-11-20 07:00:22,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18108 states, 13406 states have (on average 1.357078919886618) internal successors, (18193), 13764 states have internal predecessors, (18193), 3652 states have call successors, (3652), 1050 states have call predecessors, (3652), 1049 states have return successors, (4099), 3440 states have call predecessors, (4099), 3649 states have call successors, (4099) [2021-11-20 07:00:22,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18108 states to 18108 states and 25944 transitions. [2021-11-20 07:00:22,505 INFO L78 Accepts]: Start accepts. Automaton has 18108 states and 25944 transitions. Word has length 134 [2021-11-20 07:00:22,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:22,506 INFO L470 AbstractCegarLoop]: Abstraction has 18108 states and 25944 transitions. [2021-11-20 07:00:22,506 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 18.0) internal successors, (108), 7 states have internal predecessors, (108), 4 states have call successors, (19), 2 states have call predecessors, (19), 4 states have return successors, (18), 3 states have call predecessors, (18), 4 states have call successors, (18) [2021-11-20 07:00:22,506 INFO L276 IsEmpty]: Start isEmpty. Operand 18108 states and 25944 transitions. [2021-11-20 07:00:22,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-11-20 07:00:22,521 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:22,521 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:22,551 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:22,746 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:00:22,747 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:22,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:22,747 INFO L85 PathProgramCache]: Analyzing trace with hash -1774718592, now seen corresponding path program 1 times [2021-11-20 07:00:22,749 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:00:22,749 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1849650318] [2021-11-20 07:00:22,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:22,749 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:00:22,749 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:00:22,750 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:00:22,751 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-20 07:00:24,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:24,197 INFO L263 TraceCheckSpWp]: Trace formula consists of 1094 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-20 07:00:24,201 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:24,758 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-20 07:00:24,758 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:25,597 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-20 07:00:25,597 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:25,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1849650318] [2021-11-20 07:00:25,598 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1849650318] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:25,598 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:25,598 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2021-11-20 07:00:25,598 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [203860240] [2021-11-20 07:00:25,598 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:25,599 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 07:00:25,599 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:25,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 07:00:25,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:00:25,599 INFO L87 Difference]: Start difference. First operand 18108 states and 25944 transitions. Second operand has 8 states, 8 states have (on average 11.75) internal successors, (94), 6 states have internal predecessors, (94), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-20 07:00:26,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:26,549 INFO L93 Difference]: Finished difference Result 34727 states and 50029 transitions. [2021-11-20 07:00:26,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:00:26,550 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.75) internal successors, (94), 6 states have internal predecessors, (94), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) Word has length 134 [2021-11-20 07:00:26,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:26,668 INFO L225 Difference]: With dead ends: 34727 [2021-11-20 07:00:26,669 INFO L226 Difference]: Without dead ends: 18294 [2021-11-20 07:00:26,733 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 260 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:00:26,734 INFO L933 BasicCegarLoop]: 1202 mSDtfsCounter, 9 mSDsluCounter, 3594 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 4796 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:26,735 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 4796 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:00:26,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18294 states. [2021-11-20 07:00:28,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18294 to 18210. [2021-11-20 07:00:28,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18210 states, 13478 states have (on average 1.3560617302270366) internal successors, (18277), 13842 states have internal predecessors, (18277), 3664 states have call successors, (3664), 1050 states have call predecessors, (3664), 1067 states have return successors, (4219), 3464 states have call predecessors, (4219), 3661 states have call successors, (4219) [2021-11-20 07:00:28,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18210 states to 18210 states and 26160 transitions. [2021-11-20 07:00:28,118 INFO L78 Accepts]: Start accepts. Automaton has 18210 states and 26160 transitions. Word has length 134 [2021-11-20 07:00:28,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:28,119 INFO L470 AbstractCegarLoop]: Abstraction has 18210 states and 26160 transitions. [2021-11-20 07:00:28,119 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.75) internal successors, (94), 6 states have internal predecessors, (94), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-20 07:00:28,119 INFO L276 IsEmpty]: Start isEmpty. Operand 18210 states and 26160 transitions. [2021-11-20 07:00:28,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2021-11-20 07:00:28,133 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:28,133 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:28,174 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:28,346 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:00:28,346 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:28,347 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:28,347 INFO L85 PathProgramCache]: Analyzing trace with hash -1437416734, now seen corresponding path program 1 times [2021-11-20 07:00:28,348 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:00:28,348 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [573787515] [2021-11-20 07:00:28,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:28,349 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:00:28,349 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:00:28,349 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:00:28,352 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-20 07:00:29,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:29,392 INFO L263 TraceCheckSpWp]: Trace formula consists of 1163 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 07:00:29,397 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:30,184 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2021-11-20 07:00:30,184 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:30,693 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2021-11-20 07:00:30,694 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:30,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [573787515] [2021-11-20 07:00:30,694 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [573787515] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:30,694 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:30,694 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-20 07:00:30,694 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2125754134] [2021-11-20 07:00:30,694 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:30,695 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:00:30,695 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:30,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:00:30,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:30,696 INFO L87 Difference]: Start difference. First operand 18210 states and 26160 transitions. Second operand has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-20 07:00:31,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:31,934 INFO L93 Difference]: Finished difference Result 44292 states and 63625 transitions. [2021-11-20 07:00:31,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:00:31,935 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 138 [2021-11-20 07:00:31,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:32,095 INFO L225 Difference]: With dead ends: 44292 [2021-11-20 07:00:32,096 INFO L226 Difference]: Without dead ends: 25718 [2021-11-20 07:00:32,163 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 274 GetRequests, 273 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:32,164 INFO L933 BasicCegarLoop]: 1748 mSDtfsCounter, 897 mSDsluCounter, 1154 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 2902 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:32,165 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [897 Valid, 2902 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:00:32,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25718 states. [2021-11-20 07:00:33,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25718 to 25518. [2021-11-20 07:00:33,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25518 states, 18954 states have (on average 1.3580774506700433) internal successors, (25741), 19478 states have internal predecessors, (25741), 5026 states have call successors, (5026), 1502 states have call predecessors, (5026), 1537 states have return successors, (5928), 4715 states have call predecessors, (5928), 5023 states have call successors, (5928) [2021-11-20 07:00:33,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25518 states to 25518 states and 36695 transitions. [2021-11-20 07:00:33,827 INFO L78 Accepts]: Start accepts. Automaton has 25518 states and 36695 transitions. Word has length 138 [2021-11-20 07:00:33,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:33,827 INFO L470 AbstractCegarLoop]: Abstraction has 25518 states and 36695 transitions. [2021-11-20 07:00:33,828 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-20 07:00:33,828 INFO L276 IsEmpty]: Start isEmpty. Operand 25518 states and 36695 transitions. [2021-11-20 07:00:33,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2021-11-20 07:00:33,845 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:33,845 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:33,910 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:34,070 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:00:34,070 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:34,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:34,071 INFO L85 PathProgramCache]: Analyzing trace with hash 1581890694, now seen corresponding path program 1 times [2021-11-20 07:00:34,073 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:00:34,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [675739196] [2021-11-20 07:00:34,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:34,073 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:00:34,074 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:00:34,076 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:00:34,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-11-20 07:00:35,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:35,377 INFO L263 TraceCheckSpWp]: Trace formula consists of 1109 conjuncts, 29 conjunts are in the unsatisfiable core [2021-11-20 07:00:35,382 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:36,645 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-20 07:00:36,645 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:39,825 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-20 07:00:39,826 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:39,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [675739196] [2021-11-20 07:00:39,826 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [675739196] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:39,826 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:39,826 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11, 11] imperfect sequences [] total 20 [2021-11-20 07:00:39,826 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2019466675] [2021-11-20 07:00:39,827 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:39,827 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-11-20 07:00:39,827 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:39,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-11-20 07:00:39,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=334, Unknown=0, NotChecked=0, Total=380 [2021-11-20 07:00:39,828 INFO L87 Difference]: Start difference. First operand 25518 states and 36695 transitions. Second operand has 20 states, 20 states have (on average 5.2) internal successors, (104), 16 states have internal predecessors, (104), 6 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (17), 9 states have call predecessors, (17), 5 states have call successors, (17) [2021-11-20 07:00:52,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:52,774 INFO L93 Difference]: Finished difference Result 60036 states and 88087 transitions. [2021-11-20 07:00:52,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-20 07:00:52,775 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 5.2) internal successors, (104), 16 states have internal predecessors, (104), 6 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (17), 9 states have call predecessors, (17), 5 states have call successors, (17) Word has length 140 [2021-11-20 07:00:52,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:52,962 INFO L225 Difference]: With dead ends: 60036 [2021-11-20 07:00:52,962 INFO L226 Difference]: Without dead ends: 34563 [2021-11-20 07:00:53,044 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 261 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=117, Invalid=753, Unknown=0, NotChecked=0, Total=870 [2021-11-20 07:00:53,045 INFO L933 BasicCegarLoop]: 2337 mSDtfsCounter, 4714 mSDsluCounter, 32047 mSDsCounter, 0 mSdLazyCounter, 1257 mSolverCounterSat, 898 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4801 SdHoareTripleChecker+Valid, 34384 SdHoareTripleChecker+Invalid, 2155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 898 IncrementalHoareTripleChecker+Valid, 1257 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.4s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:53,045 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4801 Valid, 34384 Invalid, 2155 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [898 Valid, 1257 Invalid, 0 Unknown, 0 Unchecked, 9.4s Time] [2021-11-20 07:00:53,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34563 states. [2021-11-20 07:00:54,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34563 to 25482. [2021-11-20 07:00:54,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25482 states, 18918 states have (on average 1.3567501850089863) internal successors, (25667), 19444 states have internal predecessors, (25667), 5026 states have call successors, (5026), 1502 states have call predecessors, (5026), 1537 states have return successors, (5928), 4713 states have call predecessors, (5928), 5023 states have call successors, (5928) [2021-11-20 07:00:54,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25482 states to 25482 states and 36621 transitions. [2021-11-20 07:00:54,860 INFO L78 Accepts]: Start accepts. Automaton has 25482 states and 36621 transitions. Word has length 140 [2021-11-20 07:00:54,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:54,861 INFO L470 AbstractCegarLoop]: Abstraction has 25482 states and 36621 transitions. [2021-11-20 07:00:54,861 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 5.2) internal successors, (104), 16 states have internal predecessors, (104), 6 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (17), 9 states have call predecessors, (17), 5 states have call successors, (17) [2021-11-20 07:00:54,861 INFO L276 IsEmpty]: Start isEmpty. Operand 25482 states and 36621 transitions. [2021-11-20 07:00:54,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-11-20 07:00:54,881 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:54,881 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:54,925 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:55,106 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:00:55,106 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:55,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:55,107 INFO L85 PathProgramCache]: Analyzing trace with hash -1703720375, now seen corresponding path program 1 times [2021-11-20 07:00:55,109 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:00:55,109 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [126748726] [2021-11-20 07:00:55,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:55,110 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:00:55,110 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:00:55,111 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:00:55,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-11-20 07:00:56,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:56,476 INFO L263 TraceCheckSpWp]: Trace formula consists of 1176 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 07:00:56,480 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:56,989 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-11-20 07:00:56,989 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:57,466 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-11-20 07:00:57,466 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 07:00:57,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [126748726] [2021-11-20 07:00:57,466 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [126748726] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:57,466 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:57,467 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2021-11-20 07:00:57,467 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673637299] [2021-11-20 07:00:57,467 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:57,467 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:00:57,468 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 07:00:57,468 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:00:57,468 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:00:57,469 INFO L87 Difference]: Start difference. First operand 25482 states and 36621 transitions. Second operand has 6 states, 6 states have (on average 19.5) internal successors, (117), 6 states have internal predecessors, (117), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 07:01:03,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:01:03,625 INFO L93 Difference]: Finished difference Result 95181 states and 143928 transitions. [2021-11-20 07:01:03,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 07:01:03,626 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 19.5) internal successors, (117), 6 states have internal predecessors, (117), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 161 [2021-11-20 07:01:03,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:01:03,997 INFO L225 Difference]: With dead ends: 95181 [2021-11-20 07:01:03,998 INFO L226 Difference]: Without dead ends: 69744 [2021-11-20 07:01:04,102 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 326 GetRequests, 319 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:01:04,103 INFO L933 BasicCegarLoop]: 2281 mSDtfsCounter, 2404 mSDsluCounter, 8012 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 390 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2628 SdHoareTripleChecker+Valid, 10293 SdHoareTripleChecker+Invalid, 768 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 390 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2021-11-20 07:01:04,104 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2628 Valid, 10293 Invalid, 768 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [390 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2021-11-20 07:01:04,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69744 states. [2021-11-20 07:01:06,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69744 to 25530. [2021-11-20 07:01:06,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25530 states, 18966 states have (on average 1.3558473057049456) internal successors, (25715), 19492 states have internal predecessors, (25715), 5026 states have call successors, (5026), 1502 states have call predecessors, (5026), 1537 states have return successors, (5928), 4713 states have call predecessors, (5928), 5023 states have call successors, (5928) [2021-11-20 07:01:06,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25530 states to 25530 states and 36669 transitions. [2021-11-20 07:01:06,744 INFO L78 Accepts]: Start accepts. Automaton has 25530 states and 36669 transitions. Word has length 161 [2021-11-20 07:01:06,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:01:06,745 INFO L470 AbstractCegarLoop]: Abstraction has 25530 states and 36669 transitions. [2021-11-20 07:01:06,745 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 19.5) internal successors, (117), 6 states have internal predecessors, (117), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 07:01:06,745 INFO L276 IsEmpty]: Start isEmpty. Operand 25530 states and 36669 transitions. [2021-11-20 07:01:06,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2021-11-20 07:01:06,762 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:01:06,762 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:01:06,818 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (17)] Forceful destruction successful, exit code 0 [2021-11-20 07:01:06,978 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:01:06,978 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:01:06,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:01:06,979 INFO L85 PathProgramCache]: Analyzing trace with hash 436590142, now seen corresponding path program 1 times [2021-11-20 07:01:06,980 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 07:01:06,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1718986969] [2021-11-20 07:01:06,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:01:06,980 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 07:01:06,980 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 07:01:06,981 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 07:01:06,984 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-11-20 07:01:53,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 07:01:53,617 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-20 07:02:28,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 07:02:30,907 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-20 07:02:30,908 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-20 07:02:30,909 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 07:02:30,979 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2021-11-20 07:02:31,138 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 07:02:31,142 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:02:31,148 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 07:02:31,221 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-20 07:02:31,601 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 07:02:31 BoogieIcfgContainer [2021-11-20 07:02:31,601 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 07:02:31,603 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 07:02:31,604 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 07:02:31,604 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 07:02:31,605 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:59:19" (3/4) ... [2021-11-20 07:02:31,609 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-20 07:02:31,610 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 07:02:31,611 INFO L158 Benchmark]: Toolchain (without parser) took 214551.22ms. Allocated memory was 73.4MB in the beginning and 6.2GB in the end (delta: 6.1GB). Free memory was 45.1MB in the beginning and 4.5GB in the end (delta: -4.5GB). Peak memory consumption was 1.6GB. Max. memory is 16.1GB. [2021-11-20 07:02:31,612 INFO L158 Benchmark]: CDTParser took 0.93ms. Allocated memory is still 73.4MB. Free memory is still 53.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:02:31,614 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3041.86ms. Allocated memory was 73.4MB in the beginning and 148.9MB in the end (delta: 75.5MB). Free memory was 45.0MB in the beginning and 48.0MB in the end (delta: -3.0MB). Peak memory consumption was 80.3MB. Max. memory is 16.1GB. [2021-11-20 07:02:31,614 INFO L158 Benchmark]: Boogie Procedure Inliner took 304.33ms. Allocated memory is still 148.9MB. Free memory was 48.0MB in the beginning and 66.0MB in the end (delta: -18.0MB). Peak memory consumption was 2.9MB. Max. memory is 16.1GB. [2021-11-20 07:02:31,617 INFO L158 Benchmark]: Boogie Preprocessor took 269.97ms. Allocated memory was 148.9MB in the beginning and 230.7MB in the end (delta: 81.8MB). Free memory was 66.0MB in the beginning and 151.5MB in the end (delta: -85.5MB). Peak memory consumption was 35.1MB. Max. memory is 16.1GB. [2021-11-20 07:02:31,618 INFO L158 Benchmark]: RCFGBuilder took 18965.45ms. Allocated memory was 230.7MB in the beginning and 375.4MB in the end (delta: 144.7MB). Free memory was 151.4MB in the beginning and 215.8MB in the end (delta: -64.4MB). Peak memory consumption was 127.9MB. Max. memory is 16.1GB. [2021-11-20 07:02:31,618 INFO L158 Benchmark]: TraceAbstraction took 191954.75ms. Allocated memory was 375.4MB in the beginning and 6.2GB in the end (delta: 5.8GB). Free memory was 214.7MB in the beginning and 4.5GB in the end (delta: -4.3GB). Peak memory consumption was 1.5GB. Max. memory is 16.1GB. [2021-11-20 07:02:31,618 INFO L158 Benchmark]: Witness Printer took 6.47ms. Allocated memory is still 6.2GB. Free memory is still 4.5GB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:02:31,621 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.93ms. Allocated memory is still 73.4MB. Free memory is still 53.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3041.86ms. Allocated memory was 73.4MB in the beginning and 148.9MB in the end (delta: 75.5MB). Free memory was 45.0MB in the beginning and 48.0MB in the end (delta: -3.0MB). Peak memory consumption was 80.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 304.33ms. Allocated memory is still 148.9MB. Free memory was 48.0MB in the beginning and 66.0MB in the end (delta: -18.0MB). Peak memory consumption was 2.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 269.97ms. Allocated memory was 148.9MB in the beginning and 230.7MB in the end (delta: 81.8MB). Free memory was 66.0MB in the beginning and 151.5MB in the end (delta: -85.5MB). Peak memory consumption was 35.1MB. Max. memory is 16.1GB. * RCFGBuilder took 18965.45ms. Allocated memory was 230.7MB in the beginning and 375.4MB in the end (delta: 144.7MB). Free memory was 151.4MB in the beginning and 215.8MB in the end (delta: -64.4MB). Peak memory consumption was 127.9MB. Max. memory is 16.1GB. * TraceAbstraction took 191954.75ms. Allocated memory was 375.4MB in the beginning and 6.2GB in the end (delta: 5.8GB). Free memory was 214.7MB in the beginning and 4.5GB in the end (delta: -4.3GB). Peak memory consumption was 1.5GB. Max. memory is 16.1GB. * Witness Printer took 6.47ms. Allocated memory is still 6.2GB. Free memory is still 4.5GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527. Possible FailurePath: [L7077] int LDV_IN_INTERRUPT = 1; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7079] int ldv_state_variable_2 ; [L7080] int ref_cnt ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L7082] int ldv_state_variable_1 ; [L7083] int usb_counter ; [L7084] struct sk_buff *usb_ops_group1 ; [L7085] int ldv_state_variable_0 ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L7170] static struct semaphore add_remove_card_sem ; [L7171] static struct usb_card_rec *usb_card ; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; [L8586] int ldv_retval_0 ; [L8587] int ldv_retval_4 ; [L8588] int ldv_retval_1 ; [L8592] int ldv_retval_3 ; [L8593] int ldv_retval_2 ; [L8989] int INTERF_STATE = 0; [L8990] int SERIAL_STATE = 0; [L8991] void *usb_intfdata = 0; [L8992] struct urb *usb_urb = 0; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8995] int completeFnIntCounter = 0; [L8996] int completeFnBulkCounter = 0; [L8997] void (*completeFnInt)(struct urb * ) ; [L8998] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor.flags=0, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor.flags=0, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, sem={161:0}, sem={161:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={163:0}, ldv_func_arg1={163:0}, ldv_func_arg2={169:167}, ldv_func_arg2={169:167}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:-9223372001421295616}, card->usb_boot_state=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={200:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={200:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={200:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={200:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, \result={200:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={200:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={200:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={200:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={200:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=-2147483648, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={200:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={200:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}, value={200:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result={200:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}, value={200:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={200:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={200:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:-9223372001421295616}, card->rx_cmd.urb={200:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:-9223372001421295616}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:-9223372001421295616}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:-9223372001421295616}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:-9223372001421295616}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:-9223372001421295616}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, arg={163:0}, arg={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={169:167}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 857 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 191.4s, OverallIterations: 17, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 47.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 21900 SdHoareTripleChecker+Valid, 29.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 21417 mSDsluCounter, 100871 SdHoareTripleChecker+Invalid, 26.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 126 IncrementalHoareTripleChecker+Unchecked, 76577 mSDsCounter, 2372 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2863 IncrementalHoareTripleChecker+Invalid, 5361 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2372 mSolverCounterUnsat, 24294 mSDtfsCounter, 2863 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2946 GetRequests, 2856 SyntacticMatches, 0 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 99 ImplicationChecksByTransitivity, 6.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=25530occurred in iteration=16, InterpolantAutomatonStates: 95, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 16.6s AutomataMinimizationTime, 16 MinimizatonAttempts, 54214 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.9s SsaConstructionTime, 56.6s SatisfiabilityAnalysisTime, 24.0s InterpolantComputationTime, 1631 NumberOfCodeBlocks, 1615 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 2918 ConstructedInterpolants, 4 QuantifiedInterpolants, 5152 SizeOfPredicates, 43 NumberOfNonLiveVariables, 15309 ConjunctsInSsa, 87 ConjunctsInUnsatCore, 32 InterpolantComputations, 30 PerfectInterpolantSequences, 1518/1524 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-20 07:02:31,706 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_384f388a-11a2-41c6-84c9-d1581c75c89e/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample