./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 17:17:00,571 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 17:17:00,573 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 17:17:00,599 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 17:17:00,599 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 17:17:00,600 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 17:17:00,601 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 17:17:00,603 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 17:17:00,605 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 17:17:00,606 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 17:17:00,607 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 17:17:00,608 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 17:17:00,608 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 17:17:00,609 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 17:17:00,611 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 17:17:00,612 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 17:17:00,614 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 17:17:00,615 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 17:17:00,618 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 17:17:00,620 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 17:17:00,623 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 17:17:00,624 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 17:17:00,626 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 17:17:00,627 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 17:17:00,631 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 17:17:00,631 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 17:17:00,631 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 17:17:00,632 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 17:17:00,633 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 17:17:00,634 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 17:17:00,634 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 17:17:00,635 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 17:17:00,636 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 17:17:00,637 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 17:17:00,638 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 17:17:00,639 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 17:17:00,640 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 17:17:00,640 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 17:17:00,640 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 17:17:00,641 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 17:17:00,642 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 17:17:00,642 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 17:17:00,674 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 17:17:00,674 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 17:17:00,675 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 17:17:00,675 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 17:17:00,675 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 17:17:00,675 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 17:17:00,676 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 17:17:00,676 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 17:17:00,676 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 17:17:00,676 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 17:17:00,677 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 17:17:00,677 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 17:17:00,677 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 17:17:00,677 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 17:17:00,677 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 17:17:00,677 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 17:17:00,678 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 17:17:00,678 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 17:17:00,678 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 17:17:00,678 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 17:17:00,678 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 17:17:00,678 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 17:17:00,678 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 17:17:00,679 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 17:17:00,680 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2021-12-06 17:17:00,870 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 17:17:00,889 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 17:17:00,891 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 17:17:00,892 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 17:17:00,892 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 17:17:00,893 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-12-06 17:17:00,939 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/b603f90a1/4cc7617866ff463db6d69351b71dccfe/FLAG374276d20 [2021-12-06 17:17:01,642 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 17:17:01,643 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-12-06 17:17:01,676 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/b603f90a1/4cc7617866ff463db6d69351b71dccfe/FLAG374276d20 [2021-12-06 17:17:01,915 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/b603f90a1/4cc7617866ff463db6d69351b71dccfe [2021-12-06 17:17:01,917 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 17:17:01,918 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 17:17:01,919 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 17:17:01,919 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 17:17:01,922 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 17:17:01,922 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 05:17:01" (1/1) ... [2021-12-06 17:17:01,923 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@f1256c8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:01, skipping insertion in model container [2021-12-06 17:17:01,923 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 05:17:01" (1/1) ... [2021-12-06 17:17:01,928 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 17:17:02,018 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 17:17:02,820 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-12-06 17:17:03,590 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 17:17:03,612 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 17:17:03,735 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-12-06 17:17:03,929 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 17:17:04,064 INFO L208 MainTranslator]: Completed translation [2021-12-06 17:17:04,065 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04 WrapperNode [2021-12-06 17:17:04,065 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 17:17:04,066 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 17:17:04,066 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 17:17:04,067 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 17:17:04,073 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,149 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,296 INFO L137 Inliner]: procedures = 247, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6382 [2021-12-06 17:17:04,297 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 17:17:04,298 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 17:17:04,298 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 17:17:04,298 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 17:17:04,307 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,308 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,325 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,326 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,435 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,462 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,485 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,515 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 17:17:04,515 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 17:17:04,516 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 17:17:04,516 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 17:17:04,516 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (1/1) ... [2021-12-06 17:17:04,523 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 17:17:04,533 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 17:17:04,546 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 17:17:04,548 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 17:17:04,577 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-06 17:17:04,577 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-06 17:17:04,577 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2021-12-06 17:17:04,578 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2021-12-06 17:17:04,578 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 17:17:04,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 17:17:04,578 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 17:17:04,578 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 17:17:04,578 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-06 17:17:04,578 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-06 17:17:04,578 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-12-06 17:17:04,578 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-12-06 17:17:04,578 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 17:17:04,578 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 17:17:04,578 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2021-12-06 17:17:04,578 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2021-12-06 17:17:04,579 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-06 17:17:04,579 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-06 17:17:04,579 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-06 17:17:04,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-06 17:17:04,579 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-12-06 17:17:04,579 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-12-06 17:17:04,579 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-12-06 17:17:04,579 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-12-06 17:17:04,579 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2021-12-06 17:17:04,579 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2021-12-06 17:17:04,579 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-12-06 17:17:04,579 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-12-06 17:17:04,579 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 17:17:04,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2021-12-06 17:17:04,580 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 17:17:04,580 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 17:17:04,580 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2021-12-06 17:17:04,580 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-12-06 17:17:04,580 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2021-12-06 17:17:04,580 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 17:17:04,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2021-12-06 17:17:04,581 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-06 17:17:04,581 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2021-12-06 17:17:04,581 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2021-12-06 17:17:04,581 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2021-12-06 17:17:04,581 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2021-12-06 17:17:04,581 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2021-12-06 17:17:04,582 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-12-06 17:17:04,582 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2021-12-06 17:17:04,582 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 17:17:04,582 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2021-12-06 17:17:04,582 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2021-12-06 17:17:04,582 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2021-12-06 17:17:04,582 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2021-12-06 17:17:04,583 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2021-12-06 17:17:04,583 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2021-12-06 17:17:04,583 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 17:17:04,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2021-12-06 17:17:04,583 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2021-12-06 17:17:04,583 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2021-12-06 17:17:04,583 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2021-12-06 17:17:04,583 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-12-06 17:17:04,584 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2021-12-06 17:17:04,584 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 17:17:04,584 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2021-12-06 17:17:04,584 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2021-12-06 17:17:04,584 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2021-12-06 17:17:04,584 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2021-12-06 17:17:04,584 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-12-06 17:17:04,585 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2021-12-06 17:17:04,585 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 17:17:04,585 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-06 17:17:04,585 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2021-12-06 17:17:04,585 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2021-12-06 17:17:04,585 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2021-12-06 17:17:04,585 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2021-12-06 17:17:04,585 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-12-06 17:17:04,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2021-12-06 17:17:04,586 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2021-12-06 17:17:04,586 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-06 17:17:04,586 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 17:17:04,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 17:17:04,586 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2021-12-06 17:17:04,587 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2021-12-06 17:17:04,587 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2021-12-06 17:17:04,587 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2021-12-06 17:17:05,116 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 17:17:05,118 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 17:17:05,728 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 17:17:10,895 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 17:17:10,913 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 17:17:10,914 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 17:17:10,917 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:17:10 BoogieIcfgContainer [2021-12-06 17:17:10,917 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 17:17:10,918 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 17:17:10,918 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 17:17:10,921 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 17:17:10,921 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 05:17:01" (1/3) ... [2021-12-06 17:17:10,921 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@752c7256 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 05:17:10, skipping insertion in model container [2021-12-06 17:17:10,921 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:17:04" (2/3) ... [2021-12-06 17:17:10,922 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@752c7256 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 05:17:10, skipping insertion in model container [2021-12-06 17:17:10,922 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:17:10" (3/3) ... [2021-12-06 17:17:10,923 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-12-06 17:17:10,926 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 17:17:10,926 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 17:17:10,968 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 17:17:10,973 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 17:17:10,973 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 17:17:11,011 INFO L276 IsEmpty]: Start isEmpty. Operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2021-12-06 17:17:11,020 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-12-06 17:17:11,020 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:17:11,021 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:17:11,021 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:17:11,025 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:17:11,025 INFO L85 PathProgramCache]: Analyzing trace with hash -1790507018, now seen corresponding path program 1 times [2021-12-06 17:17:11,031 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:17:11,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1537835848] [2021-12-06 17:17:11,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:17:11,032 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:17:11,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:11,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:17:11,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:11,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:17:11,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:11,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:17:11,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:11,464 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 17:17:11,464 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:17:11,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1537835848] [2021-12-06 17:17:11,465 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1537835848] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:17:11,465 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:17:11,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 17:17:11,466 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [160795760] [2021-12-06 17:17:11,467 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:17:11,470 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 17:17:11,470 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:17:11,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 17:17:11,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 17:17:11,495 INFO L87 Difference]: Start difference. First operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-06 17:17:13,778 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:17:17,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:17:17,432 INFO L93 Difference]: Finished difference Result 4845 states and 7288 transitions. [2021-12-06 17:17:17,434 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 17:17:17,435 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2021-12-06 17:17:17,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:17:17,464 INFO L225 Difference]: With dead ends: 4845 [2021-12-06 17:17:17,464 INFO L226 Difference]: Without dead ends: 3260 [2021-12-06 17:17:17,474 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:17:17,477 INFO L933 BasicCegarLoop]: 2530 mSDtfsCounter, 2777 mSDsluCounter, 3267 mSDsCounter, 0 mSdLazyCounter, 1220 mSolverCounterSat, 776 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2975 SdHoareTripleChecker+Valid, 5797 SdHoareTripleChecker+Invalid, 1997 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 776 IncrementalHoareTripleChecker+Valid, 1220 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2021-12-06 17:17:17,478 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2975 Valid, 5797 Invalid, 1997 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [776 Valid, 1220 Invalid, 1 Unknown, 0 Unchecked, 5.7s Time] [2021-12-06 17:17:17,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3260 states. [2021-12-06 17:17:17,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3260 to 3042. [2021-12-06 17:17:17,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3042 states, 2325 states have (on average 1.4055913978494623) internal successors, (3268), 2349 states have internal predecessors, (3268), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2021-12-06 17:17:17,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3042 states to 3042 states and 4479 transitions. [2021-12-06 17:17:17,692 INFO L78 Accepts]: Start accepts. Automaton has 3042 states and 4479 transitions. Word has length 39 [2021-12-06 17:17:17,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:17:17,693 INFO L470 AbstractCegarLoop]: Abstraction has 3042 states and 4479 transitions. [2021-12-06 17:17:17,693 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-06 17:17:17,693 INFO L276 IsEmpty]: Start isEmpty. Operand 3042 states and 4479 transitions. [2021-12-06 17:17:17,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-06 17:17:17,700 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:17:17,700 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:17:17,700 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 17:17:17,700 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:17:17,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:17:17,701 INFO L85 PathProgramCache]: Analyzing trace with hash 1277499630, now seen corresponding path program 1 times [2021-12-06 17:17:17,701 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:17:17,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2053415624] [2021-12-06 17:17:17,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:17:17,701 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:17:17,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:17,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:17:17,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:17,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:17:17,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:17,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:17:17,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:17,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:17:17,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:17,968 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 17:17:17,968 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:17:17,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2053415624] [2021-12-06 17:17:17,969 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2053415624] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:17:17,969 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:17:17,969 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:17:17,969 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [211624473] [2021-12-06 17:17:17,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:17:17,971 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:17:17,971 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:17:17,972 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:17:17,972 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:17:17,972 INFO L87 Difference]: Start difference. First operand 3042 states and 4479 transitions. Second operand has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:17:20,227 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:17:24,428 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:17:26,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:17:26,797 INFO L93 Difference]: Finished difference Result 9539 states and 14216 transitions. [2021-12-06 17:17:26,797 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 17:17:26,797 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2021-12-06 17:17:26,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:17:26,832 INFO L225 Difference]: With dead ends: 9539 [2021-12-06 17:17:26,832 INFO L226 Difference]: Without dead ends: 6498 [2021-12-06 17:17:26,843 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2021-12-06 17:17:26,844 INFO L933 BasicCegarLoop]: 2560 mSDtfsCounter, 2780 mSDsluCounter, 8003 mSDsCounter, 0 mSdLazyCounter, 1869 mSolverCounterSat, 757 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2979 SdHoareTripleChecker+Valid, 10563 SdHoareTripleChecker+Invalid, 2628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 757 IncrementalHoareTripleChecker+Valid, 1869 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2021-12-06 17:17:26,844 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2979 Valid, 10563 Invalid, 2628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [757 Valid, 1869 Invalid, 2 Unknown, 0 Unchecked, 8.5s Time] [2021-12-06 17:17:26,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6498 states. [2021-12-06 17:17:27,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6498 to 6092. [2021-12-06 17:17:27,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6092 states, 4657 states have (on average 1.4056259394459953) internal successors, (6546), 4707 states have internal predecessors, (6546), 1208 states have call successors, (1208), 221 states have call predecessors, (1208), 226 states have return successors, (1237), 1211 states have call predecessors, (1237), 1207 states have call successors, (1237) [2021-12-06 17:17:27,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6092 states to 6092 states and 8991 transitions. [2021-12-06 17:17:27,053 INFO L78 Accepts]: Start accepts. Automaton has 6092 states and 8991 transitions. Word has length 49 [2021-12-06 17:17:27,053 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:17:27,053 INFO L470 AbstractCegarLoop]: Abstraction has 6092 states and 8991 transitions. [2021-12-06 17:17:27,054 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:17:27,054 INFO L276 IsEmpty]: Start isEmpty. Operand 6092 states and 8991 transitions. [2021-12-06 17:17:27,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-06 17:17:27,068 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:17:27,068 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:17:27,068 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 17:17:27,068 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:17:27,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:17:27,069 INFO L85 PathProgramCache]: Analyzing trace with hash 41662539, now seen corresponding path program 1 times [2021-12-06 17:17:27,069 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:17:27,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [192052080] [2021-12-06 17:17:27,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:17:27,069 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:17:27,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:17:27,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:17:27,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:17:27,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 17:17:27,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-06 17:17:27,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:27,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-06 17:17:27,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:27,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:27,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 17:17:27,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 17:17:27,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:27,398 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2021-12-06 17:17:27,398 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:17:27,398 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [192052080] [2021-12-06 17:17:27,398 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [192052080] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:17:27,398 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:17:27,399 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:17:27,399 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [401561116] [2021-12-06 17:17:27,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:17:27,399 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:17:27,399 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:17:27,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:17:27,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:17:27,400 INFO L87 Difference]: Start difference. First operand 6092 states and 8991 transitions. Second operand has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-06 17:17:29,564 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:17:33,156 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:17:33,156 INFO L93 Difference]: Finished difference Result 13999 states and 20777 transitions. [2021-12-06 17:17:33,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 17:17:33,158 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2021-12-06 17:17:33,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:17:33,196 INFO L225 Difference]: With dead ends: 13999 [2021-12-06 17:17:33,196 INFO L226 Difference]: Without dead ends: 7917 [2021-12-06 17:17:33,211 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:17:33,212 INFO L933 BasicCegarLoop]: 2215 mSDtfsCounter, 1720 mSDsluCounter, 3040 mSDsCounter, 0 mSdLazyCounter, 1158 mSolverCounterSat, 1188 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1767 SdHoareTripleChecker+Valid, 5255 SdHoareTripleChecker+Invalid, 2347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1188 IncrementalHoareTripleChecker+Valid, 1158 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2021-12-06 17:17:33,213 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1767 Valid, 5255 Invalid, 2347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1188 Valid, 1158 Invalid, 1 Unknown, 0 Unchecked, 5.5s Time] [2021-12-06 17:17:33,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7917 states. [2021-12-06 17:17:33,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7917 to 7421. [2021-12-06 17:17:33,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7421 states, 5764 states have (on average 1.4191533657182511) internal successors, (8180), 5814 states have internal predecessors, (8180), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 295 states have return successors, (1390), 1364 states have call predecessors, (1390), 1360 states have call successors, (1390) [2021-12-06 17:17:33,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7421 states to 7421 states and 10931 transitions. [2021-12-06 17:17:33,480 INFO L78 Accepts]: Start accepts. Automaton has 7421 states and 10931 transitions. Word has length 117 [2021-12-06 17:17:33,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:17:33,480 INFO L470 AbstractCegarLoop]: Abstraction has 7421 states and 10931 transitions. [2021-12-06 17:17:33,481 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.833333333333334) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-06 17:17:33,481 INFO L276 IsEmpty]: Start isEmpty. Operand 7421 states and 10931 transitions. [2021-12-06 17:17:33,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2021-12-06 17:17:33,498 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:17:33,498 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:17:33,499 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 17:17:33,499 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:17:33,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:17:33,500 INFO L85 PathProgramCache]: Analyzing trace with hash -2139715759, now seen corresponding path program 1 times [2021-12-06 17:17:33,500 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:17:33,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697099075] [2021-12-06 17:17:33,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:17:33,500 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:17:33,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:17:33,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:17:33,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:17:33,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:17:33,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 17:17:33,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 17:17:33,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-06 17:17:33,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-06 17:17:33,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-12-06 17:17:33,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 17:17:33,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:33,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 17:17:33,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:33,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:33,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-06 17:17:33,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:33,968 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2021-12-06 17:17:33,969 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:17:33,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697099075] [2021-12-06 17:17:33,969 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697099075] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:17:33,969 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:17:33,969 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 17:17:33,969 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459940076] [2021-12-06 17:17:33,969 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:17:33,970 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 17:17:33,970 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:17:33,970 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 17:17:33,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:17:33,971 INFO L87 Difference]: Start difference. First operand 7421 states and 10931 transitions. Second operand has 8 states, 8 states have (on average 12.75) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-06 17:17:36,281 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:17:42,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:17:42,109 INFO L93 Difference]: Finished difference Result 15293 states and 22715 transitions. [2021-12-06 17:17:42,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 17:17:42,112 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.75) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 157 [2021-12-06 17:17:42,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:17:42,149 INFO L225 Difference]: With dead ends: 15293 [2021-12-06 17:17:42,149 INFO L226 Difference]: Without dead ends: 7889 [2021-12-06 17:17:42,168 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2021-12-06 17:17:42,169 INFO L933 BasicCegarLoop]: 2179 mSDtfsCounter, 603 mSDsluCounter, 8089 mSDsCounter, 0 mSdLazyCounter, 2418 mSolverCounterSat, 685 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 617 SdHoareTripleChecker+Valid, 10268 SdHoareTripleChecker+Invalid, 3104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 685 IncrementalHoareTripleChecker+Valid, 2418 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.9s IncrementalHoareTripleChecker+Time [2021-12-06 17:17:42,169 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [617 Valid, 10268 Invalid, 3104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [685 Valid, 2418 Invalid, 1 Unknown, 0 Unchecked, 7.9s Time] [2021-12-06 17:17:42,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7889 states. [2021-12-06 17:17:42,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7889 to 7421. [2021-12-06 17:17:42,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7421 states, 5760 states have (on average 1.4180555555555556) internal successors, (8168), 5812 states have internal predecessors, (8168), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 299 states have return successors, (1398), 1366 states have call predecessors, (1398), 1360 states have call successors, (1398) [2021-12-06 17:17:42,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7421 states to 7421 states and 10927 transitions. [2021-12-06 17:17:42,397 INFO L78 Accepts]: Start accepts. Automaton has 7421 states and 10927 transitions. Word has length 157 [2021-12-06 17:17:42,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:17:42,398 INFO L470 AbstractCegarLoop]: Abstraction has 7421 states and 10927 transitions. [2021-12-06 17:17:42,398 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.75) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-06 17:17:42,398 INFO L276 IsEmpty]: Start isEmpty. Operand 7421 states and 10927 transitions. [2021-12-06 17:17:42,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 165 [2021-12-06 17:17:42,408 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:17:42,408 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:17:42,408 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 17:17:42,409 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:17:42,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:17:42,409 INFO L85 PathProgramCache]: Analyzing trace with hash -55648936, now seen corresponding path program 1 times [2021-12-06 17:17:42,409 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:17:42,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [439781079] [2021-12-06 17:17:42,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:17:42,409 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:17:42,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:17:42,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:17:42,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:17:42,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:17:42,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 17:17:42,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 17:17:42,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-06 17:17:42,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-06 17:17:42,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-12-06 17:17:42,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 17:17:42,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:42,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 17:17:42,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:42,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:42,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 17:17:42,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2021-12-06 17:17:42,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:42,840 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-06 17:17:42,841 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:17:42,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [439781079] [2021-12-06 17:17:42,841 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [439781079] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:17:42,841 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:17:42,841 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 17:17:42,841 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [626340392] [2021-12-06 17:17:42,841 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:17:42,842 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 17:17:42,842 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:17:42,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 17:17:42,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:17:42,843 INFO L87 Difference]: Start difference. First operand 7421 states and 10927 transitions. Second operand has 8 states, 8 states have (on average 13.25) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 5 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:17:45,081 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:17:48,889 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:17:48,889 INFO L93 Difference]: Finished difference Result 15369 states and 22867 transitions. [2021-12-06 17:17:48,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 17:17:48,891 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.25) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 5 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 164 [2021-12-06 17:17:48,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:17:48,916 INFO L225 Difference]: With dead ends: 15369 [2021-12-06 17:17:48,916 INFO L226 Difference]: Without dead ends: 7965 [2021-12-06 17:17:48,933 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:17:48,933 INFO L933 BasicCegarLoop]: 2181 mSDtfsCounter, 909 mSDsluCounter, 6999 mSDsCounter, 0 mSdLazyCounter, 1764 mSolverCounterSat, 1026 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 924 SdHoareTripleChecker+Valid, 9180 SdHoareTripleChecker+Invalid, 2791 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1026 IncrementalHoareTripleChecker+Valid, 1764 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2021-12-06 17:17:48,934 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [924 Valid, 9180 Invalid, 2791 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1026 Valid, 1764 Invalid, 1 Unknown, 0 Unchecked, 5.9s Time] [2021-12-06 17:17:48,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7965 states. [2021-12-06 17:17:49,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7965 to 7453. [2021-12-06 17:17:49,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7453 states, 5784 states have (on average 1.4163208852005533) internal successors, (8192), 5836 states have internal predecessors, (8192), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 307 states have return successors, (1462), 1374 states have call predecessors, (1462), 1360 states have call successors, (1462) [2021-12-06 17:17:49,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7453 states to 7453 states and 11015 transitions. [2021-12-06 17:17:49,140 INFO L78 Accepts]: Start accepts. Automaton has 7453 states and 11015 transitions. Word has length 164 [2021-12-06 17:17:49,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:17:49,140 INFO L470 AbstractCegarLoop]: Abstraction has 7453 states and 11015 transitions. [2021-12-06 17:17:49,141 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.25) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 5 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:17:49,141 INFO L276 IsEmpty]: Start isEmpty. Operand 7453 states and 11015 transitions. [2021-12-06 17:17:49,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 167 [2021-12-06 17:17:49,151 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:17:49,151 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:17:49,151 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 17:17:49,151 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:17:49,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:17:49,152 INFO L85 PathProgramCache]: Analyzing trace with hash -717777381, now seen corresponding path program 1 times [2021-12-06 17:17:49,152 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:17:49,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2078398202] [2021-12-06 17:17:49,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:17:49,152 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:17:49,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:17:49,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:17:49,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:17:49,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:17:49,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 17:17:49,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 17:17:49,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-06 17:17:49,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-06 17:17:49,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-12-06 17:17:49,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 17:17:49,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:49,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-06 17:17:49,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:49,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:17:49,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 17:17:49,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-12-06 17:17:49,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:17:49,902 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-06 17:17:49,902 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:17:49,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2078398202] [2021-12-06 17:17:49,902 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2078398202] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:17:49,902 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:17:49,902 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 17:17:49,903 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [887176603] [2021-12-06 17:17:49,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:17:49,903 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 17:17:49,904 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:17:49,904 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 17:17:49,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:17:49,904 INFO L87 Difference]: Start difference. First operand 7453 states and 11015 transitions. Second operand has 8 states, 8 states have (on average 13.5) internal successors, (108), 5 states have internal predecessors, (108), 2 states have call successors, (17), 5 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:17:52,203 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:17:54,617 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:05,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:18:05,356 INFO L93 Difference]: Finished difference Result 15790 states and 23451 transitions. [2021-12-06 17:18:05,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 17:18:05,359 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.5) internal successors, (108), 5 states have internal predecessors, (108), 2 states have call successors, (17), 5 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 166 [2021-12-06 17:18:05,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:18:05,378 INFO L225 Difference]: With dead ends: 15790 [2021-12-06 17:18:05,378 INFO L226 Difference]: Without dead ends: 8344 [2021-12-06 17:18:05,389 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2021-12-06 17:18:05,389 INFO L933 BasicCegarLoop]: 4242 mSDtfsCounter, 2770 mSDsluCounter, 13879 mSDsCounter, 0 mSdLazyCounter, 4476 mSolverCounterSat, 846 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2967 SdHoareTripleChecker+Valid, 18121 SdHoareTripleChecker+Invalid, 5324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 846 IncrementalHoareTripleChecker+Valid, 4476 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:18:05,390 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2967 Valid, 18121 Invalid, 5324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [846 Valid, 4476 Invalid, 2 Unknown, 0 Unchecked, 15.1s Time] [2021-12-06 17:18:05,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8344 states. [2021-12-06 17:18:05,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8344 to 7492. [2021-12-06 17:18:05,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7492 states, 5814 states have (on average 1.41468868249054) internal successors, (8225), 5869 states have internal predecessors, (8225), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 310 states have return successors, (1468), 1377 states have call predecessors, (1468), 1366 states have call successors, (1468) [2021-12-06 17:18:05,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7492 states to 7492 states and 11060 transitions. [2021-12-06 17:18:05,623 INFO L78 Accepts]: Start accepts. Automaton has 7492 states and 11060 transitions. Word has length 166 [2021-12-06 17:18:05,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:18:05,623 INFO L470 AbstractCegarLoop]: Abstraction has 7492 states and 11060 transitions. [2021-12-06 17:18:05,623 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.5) internal successors, (108), 5 states have internal predecessors, (108), 2 states have call successors, (17), 5 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:18:05,623 INFO L276 IsEmpty]: Start isEmpty. Operand 7492 states and 11060 transitions. [2021-12-06 17:18:05,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-12-06 17:18:05,633 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:18:05,633 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:18:05,633 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 17:18:05,633 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:18:05,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:18:05,633 INFO L85 PathProgramCache]: Analyzing trace with hash -123678410, now seen corresponding path program 1 times [2021-12-06 17:18:05,633 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:18:05,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2073531709] [2021-12-06 17:18:05,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:18:05,634 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:18:06,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:18:06,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:18:06,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:18:06,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:18:06,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 17:18:06,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 17:18:06,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 17:18:06,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-06 17:18:06,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 17:18:06,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 17:18:06,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 17:18:06,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:06,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 17:18:06,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:06,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:06,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:06,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 17:18:06,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:07,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2021-12-06 17:18:07,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:07,013 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-12-06 17:18:07,013 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:18:07,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2073531709] [2021-12-06 17:18:07,014 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2073531709] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:18:07,014 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:18:07,014 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [18] imperfect sequences [] total 18 [2021-12-06 17:18:07,014 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [75438533] [2021-12-06 17:18:07,014 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:18:07,014 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2021-12-06 17:18:07,015 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:18:07,015 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2021-12-06 17:18:07,015 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=269, Unknown=0, NotChecked=0, Total=306 [2021-12-06 17:18:07,015 INFO L87 Difference]: Start difference. First operand 7492 states and 11060 transitions. Second operand has 18 states, 17 states have (on average 6.529411764705882) internal successors, (111), 11 states have internal predecessors, (111), 3 states have call successors, (18), 5 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-06 17:18:09,626 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:18,381 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:24,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:18:24,511 INFO L93 Difference]: Finished difference Result 19805 states and 30193 transitions. [2021-12-06 17:18:24,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-12-06 17:18:24,513 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 6.529411764705882) internal successors, (111), 11 states have internal predecessors, (111), 3 states have call successors, (18), 5 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 172 [2021-12-06 17:18:24,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:18:24,550 INFO L225 Difference]: With dead ends: 19805 [2021-12-06 17:18:24,550 INFO L226 Difference]: Without dead ends: 12330 [2021-12-06 17:18:24,561 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=73, Invalid=479, Unknown=0, NotChecked=0, Total=552 [2021-12-06 17:18:24,562 INFO L933 BasicCegarLoop]: 3648 mSDtfsCounter, 1398 mSDsluCounter, 43522 mSDsCounter, 0 mSdLazyCounter, 6680 mSolverCounterSat, 350 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1657 SdHoareTripleChecker+Valid, 47170 SdHoareTripleChecker+Invalid, 7032 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 350 IncrementalHoareTripleChecker+Valid, 6680 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.9s IncrementalHoareTripleChecker+Time [2021-12-06 17:18:24,562 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1657 Valid, 47170 Invalid, 7032 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [350 Valid, 6680 Invalid, 2 Unknown, 0 Unchecked, 16.9s Time] [2021-12-06 17:18:24,572 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12330 states. [2021-12-06 17:18:24,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12330 to 7506. [2021-12-06 17:18:24,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7506 states, 5826 states have (on average 1.4131479574322006) internal successors, (8233), 5877 states have internal predecessors, (8233), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:18:24,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7506 states to 7506 states and 11078 transitions. [2021-12-06 17:18:24,889 INFO L78 Accepts]: Start accepts. Automaton has 7506 states and 11078 transitions. Word has length 172 [2021-12-06 17:18:24,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:18:24,889 INFO L470 AbstractCegarLoop]: Abstraction has 7506 states and 11078 transitions. [2021-12-06 17:18:24,890 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 6.529411764705882) internal successors, (111), 11 states have internal predecessors, (111), 3 states have call successors, (18), 5 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-06 17:18:24,890 INFO L276 IsEmpty]: Start isEmpty. Operand 7506 states and 11078 transitions. [2021-12-06 17:18:24,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2021-12-06 17:18:24,904 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:18:24,904 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:18:24,904 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 17:18:24,904 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:18:24,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:18:24,904 INFO L85 PathProgramCache]: Analyzing trace with hash -1247287038, now seen corresponding path program 1 times [2021-12-06 17:18:24,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:18:24,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [711844011] [2021-12-06 17:18:24,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:18:24,905 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:18:25,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:18:25,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:18:25,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:18:25,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:18:25,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 17:18:25,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 17:18:25,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 17:18:25,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-06 17:18:25,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 17:18:25,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 17:18:25,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 17:18:25,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:25,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 17:18:25,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:25,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:25,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 17:18:25,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-12-06 17:18:25,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:25,339 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-12-06 17:18:25,339 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:18:25,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [711844011] [2021-12-06 17:18:25,339 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [711844011] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:18:25,339 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:18:25,339 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:18:25,339 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1778677461] [2021-12-06 17:18:25,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:18:25,340 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:18:25,340 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:18:25,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:18:25,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:18:25,340 INFO L87 Difference]: Start difference. First operand 7506 states and 11078 transitions. Second operand has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 17:18:27,574 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:29,609 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:39,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:18:39,661 INFO L93 Difference]: Finished difference Result 19819 states and 30163 transitions. [2021-12-06 17:18:39,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 17:18:39,664 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 178 [2021-12-06 17:18:39,664 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:18:39,711 INFO L225 Difference]: With dead ends: 19819 [2021-12-06 17:18:39,712 INFO L226 Difference]: Without dead ends: 12330 [2021-12-06 17:18:39,730 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:18:39,731 INFO L933 BasicCegarLoop]: 3599 mSDtfsCounter, 1679 mSDsluCounter, 6055 mSDsCounter, 0 mSdLazyCounter, 2505 mSolverCounterSat, 718 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1934 SdHoareTripleChecker+Valid, 9654 SdHoareTripleChecker+Invalid, 3225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 718 IncrementalHoareTripleChecker+Valid, 2505 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.9s IncrementalHoareTripleChecker+Time [2021-12-06 17:18:39,731 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1934 Valid, 9654 Invalid, 3225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [718 Valid, 2505 Invalid, 2 Unknown, 0 Unchecked, 13.9s Time] [2021-12-06 17:18:39,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12330 states. [2021-12-06 17:18:40,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12330 to 7510. [2021-12-06 17:18:40,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7510 states, 5830 states have (on average 1.4128644939965695) internal successors, (8237), 5881 states have internal predecessors, (8237), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:18:40,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7510 states to 7510 states and 11082 transitions. [2021-12-06 17:18:40,094 INFO L78 Accepts]: Start accepts. Automaton has 7510 states and 11082 transitions. Word has length 178 [2021-12-06 17:18:40,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:18:40,094 INFO L470 AbstractCegarLoop]: Abstraction has 7510 states and 11082 transitions. [2021-12-06 17:18:40,094 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 5 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 17:18:40,095 INFO L276 IsEmpty]: Start isEmpty. Operand 7510 states and 11082 transitions. [2021-12-06 17:18:40,104 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2021-12-06 17:18:40,104 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:18:40,104 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:18:40,104 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 17:18:40,104 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:18:40,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:18:40,105 INFO L85 PathProgramCache]: Analyzing trace with hash -494582719, now seen corresponding path program 1 times [2021-12-06 17:18:40,105 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:18:40,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1463244328] [2021-12-06 17:18:40,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:18:40,105 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:18:40,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:18:40,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:18:40,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:18:40,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:18:40,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 17:18:40,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 17:18:40,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 17:18:40,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-06 17:18:40,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 17:18:40,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 17:18:40,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 17:18:40,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:40,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 17:18:40,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:40,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:40,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 17:18:40,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2021-12-06 17:18:40,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-06 17:18:40,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:40,549 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 134 trivial. 0 not checked. [2021-12-06 17:18:40,549 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:18:40,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1463244328] [2021-12-06 17:18:40,550 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1463244328] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:18:40,550 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:18:40,550 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 17:18:40,550 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561166527] [2021-12-06 17:18:40,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:18:40,551 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 17:18:40,551 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:18:40,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 17:18:40,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:18:40,551 INFO L87 Difference]: Start difference. First operand 7510 states and 11082 transitions. Second operand has 7 states, 7 states have (on average 16.571428571428573) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-06 17:18:42,786 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:46,412 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:49,547 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:18:55,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:18:55,859 INFO L93 Difference]: Finished difference Result 23909 states and 36931 transitions. [2021-12-06 17:18:55,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 17:18:55,862 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 16.571428571428573) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2021-12-06 17:18:55,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:18:55,912 INFO L225 Difference]: With dead ends: 23909 [2021-12-06 17:18:55,912 INFO L226 Difference]: Without dead ends: 16416 [2021-12-06 17:18:55,934 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:18:55,934 INFO L933 BasicCegarLoop]: 4779 mSDtfsCounter, 3141 mSDsluCounter, 5982 mSDsCounter, 0 mSdLazyCounter, 1969 mSolverCounterSat, 1387 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3619 SdHoareTripleChecker+Valid, 10761 SdHoareTripleChecker+Invalid, 3359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1387 IncrementalHoareTripleChecker+Valid, 1969 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.8s IncrementalHoareTripleChecker+Time [2021-12-06 17:18:55,934 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3619 Valid, 10761 Invalid, 3359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1387 Valid, 1969 Invalid, 3 Unknown, 0 Unchecked, 14.8s Time] [2021-12-06 17:18:55,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16416 states. [2021-12-06 17:18:56,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16416 to 7518. [2021-12-06 17:18:56,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4122987324426173) internal successors, (8245), 5889 states have internal predecessors, (8245), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:18:56,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11090 transitions. [2021-12-06 17:18:56,365 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11090 transitions. Word has length 182 [2021-12-06 17:18:56,366 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:18:56,366 INFO L470 AbstractCegarLoop]: Abstraction has 7518 states and 11090 transitions. [2021-12-06 17:18:56,366 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 16.571428571428573) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-06 17:18:56,366 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11090 transitions. [2021-12-06 17:18:56,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2021-12-06 17:18:56,377 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:18:56,377 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:18:56,377 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 17:18:56,377 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:18:56,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:18:56,378 INFO L85 PathProgramCache]: Analyzing trace with hash -1968730126, now seen corresponding path program 1 times [2021-12-06 17:18:56,378 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:18:56,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [892396796] [2021-12-06 17:18:56,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:18:56,378 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:18:56,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:18:56,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:18:56,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:18:56,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 17:18:56,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 17:18:56,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 17:18:56,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 17:18:56,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-06 17:18:56,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 17:18:56,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 17:18:56,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 17:18:56,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:56,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 17:18:56,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:56,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 17:18:56,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 17:18:56,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-06 17:18:56,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-12-06 17:18:56,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:18:56,722 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-12-06 17:18:56,722 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:18:56,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [892396796] [2021-12-06 17:18:56,722 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [892396796] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:18:56,722 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:18:56,722 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 17:18:56,723 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [954866830] [2021-12-06 17:18:56,723 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:18:56,723 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 17:18:56,723 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:18:56,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 17:18:56,723 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-12-06 17:18:56,724 INFO L87 Difference]: Start difference. First operand 7518 states and 11090 transitions. Second operand has 9 states, 9 states have (on average 13.222222222222221) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 6 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 17:18:59,131 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:19:01,171 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 17:19:12,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:19:12,035 INFO L93 Difference]: Finished difference Result 20071 states and 30899 transitions. [2021-12-06 17:19:12,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 17:19:12,038 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 13.222222222222221) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 6 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 183 [2021-12-06 17:19:12,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:19:12,071 INFO L225 Difference]: With dead ends: 20071 [2021-12-06 17:19:12,071 INFO L226 Difference]: Without dead ends: 12570 [2021-12-06 17:19:12,089 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2021-12-06 17:19:12,089 INFO L933 BasicCegarLoop]: 3577 mSDtfsCounter, 2082 mSDsluCounter, 12647 mSDsCounter, 0 mSdLazyCounter, 3442 mSolverCounterSat, 1100 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2372 SdHoareTripleChecker+Valid, 16224 SdHoareTripleChecker+Invalid, 4544 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1100 IncrementalHoareTripleChecker+Valid, 3442 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.8s IncrementalHoareTripleChecker+Time [2021-12-06 17:19:12,090 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2372 Valid, 16224 Invalid, 4544 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1100 Valid, 3442 Invalid, 2 Unknown, 0 Unchecked, 14.8s Time] [2021-12-06 17:19:12,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12570 states. [2021-12-06 17:19:12,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12570 to 7518. [2021-12-06 17:19:12,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4116135662898253) internal successors, (8241), 5889 states have internal predecessors, (8241), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:19:12,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11086 transitions. [2021-12-06 17:19:12,435 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11086 transitions. Word has length 183 [2021-12-06 17:19:12,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:19:12,436 INFO L470 AbstractCegarLoop]: Abstraction has 7518 states and 11086 transitions. [2021-12-06 17:19:12,436 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 13.222222222222221) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 6 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 17:19:12,436 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11086 transitions. [2021-12-06 17:19:12,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-12-06 17:19:12,446 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:19:12,446 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:19:12,446 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 17:19:12,446 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:19:12,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:19:12,446 INFO L85 PathProgramCache]: Analyzing trace with hash -1261467869, now seen corresponding path program 1 times [2021-12-06 17:19:12,446 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:19:12,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1020846748] [2021-12-06 17:19:12,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:19:12,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:19:13,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 17:19:13,141 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 17:19:13,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 17:19:14,121 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 17:19:14,121 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 17:19:14,122 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 17:19:14,123 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 17:19:14,126 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:19:14,128 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 17:19:14,194 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,195 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,195 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,195 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,196 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,196 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,196 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,197 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,197 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,197 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 17:19:14,377 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 05:19:14 BoogieIcfgContainer [2021-12-06 17:19:14,377 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 17:19:14,377 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 17:19:14,377 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 17:19:14,377 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 17:19:14,378 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:17:10" (3/4) ... [2021-12-06 17:19:14,380 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 17:19:14,380 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 17:19:14,380 INFO L158 Benchmark]: Toolchain (without parser) took 132462.49ms. Allocated memory was 109.1MB in the beginning and 1.0GB in the end (delta: 935.3MB). Free memory was 79.1MB in the beginning and 455.4MB in the end (delta: -376.3MB). Peak memory consumption was 559.0MB. Max. memory is 16.1GB. [2021-12-06 17:19:14,381 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 73.4MB. Free memory is still 53.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 17:19:14,381 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2146.37ms. Allocated memory was 109.1MB in the beginning and 174.1MB in the end (delta: 65.0MB). Free memory was 79.1MB in the beginning and 65.5MB in the end (delta: 13.5MB). Peak memory consumption was 81.1MB. Max. memory is 16.1GB. [2021-12-06 17:19:14,381 INFO L158 Benchmark]: Boogie Procedure Inliner took 230.84ms. Allocated memory is still 174.1MB. Free memory was 65.5MB in the beginning and 72.6MB in the end (delta: -7.0MB). Peak memory consumption was 5.1MB. Max. memory is 16.1GB. [2021-12-06 17:19:14,381 INFO L158 Benchmark]: Boogie Preprocessor took 217.08ms. Allocated memory is still 174.1MB. Free memory was 72.6MB in the beginning and 67.0MB in the end (delta: 5.6MB). Peak memory consumption was 38.4MB. Max. memory is 16.1GB. [2021-12-06 17:19:14,382 INFO L158 Benchmark]: RCFGBuilder took 6401.82ms. Allocated memory was 174.1MB in the beginning and 360.7MB in the end (delta: 186.6MB). Free memory was 67.0MB in the beginning and 151.8MB in the end (delta: -84.8MB). Peak memory consumption was 138.8MB. Max. memory is 16.1GB. [2021-12-06 17:19:14,382 INFO L158 Benchmark]: TraceAbstraction took 123458.48ms. Allocated memory was 360.7MB in the beginning and 1.0GB in the end (delta: 683.7MB). Free memory was 150.8MB in the beginning and 455.4MB in the end (delta: -304.6MB). Peak memory consumption was 576.2MB. Max. memory is 16.1GB. [2021-12-06 17:19:14,382 INFO L158 Benchmark]: Witness Printer took 2.78ms. Allocated memory is still 1.0GB. Free memory is still 455.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 17:19:14,383 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 73.4MB. Free memory is still 53.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2146.37ms. Allocated memory was 109.1MB in the beginning and 174.1MB in the end (delta: 65.0MB). Free memory was 79.1MB in the beginning and 65.5MB in the end (delta: 13.5MB). Peak memory consumption was 81.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 230.84ms. Allocated memory is still 174.1MB. Free memory was 65.5MB in the beginning and 72.6MB in the end (delta: -7.0MB). Peak memory consumption was 5.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 217.08ms. Allocated memory is still 174.1MB. Free memory was 72.6MB in the beginning and 67.0MB in the end (delta: 5.6MB). Peak memory consumption was 38.4MB. Max. memory is 16.1GB. * RCFGBuilder took 6401.82ms. Allocated memory was 174.1MB in the beginning and 360.7MB in the end (delta: 186.6MB). Free memory was 67.0MB in the beginning and 151.8MB in the end (delta: -84.8MB). Peak memory consumption was 138.8MB. Max. memory is 16.1GB. * TraceAbstraction took 123458.48ms. Allocated memory was 360.7MB in the beginning and 1.0GB in the end (delta: 683.7MB). Free memory was 150.8MB in the beginning and 455.4MB in the end (delta: -304.6MB). Peak memory consumption was 576.2MB. Max. memory is 16.1GB. * Witness Printer took 2.78ms. Allocated memory is still 1.0GB. Free memory is still 455.4MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7474]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 10722, overapproximation of bitwiseAnd at line 9945. Possible FailurePath: [L7497] int ldv_irq_1_3 = 0; [L7498] void *ldv_irq_data_1_1 ; [L7499] int ldv_irq_1_0 = 0; [L7500] void *ldv_irq_data_1_0 ; [L7501] int ldv_state_variable_0 ; [L7502] int ldv_state_variable_2 ; [L7503] void *ldv_irq_data_1_3 ; [L7504] struct sk_buff *pcie_ops_group1 ; [L7505] struct device *mwifiex_pcie_pm_ops_group1 ; [L7506] void *ldv_irq_data_1_2 ; [L7507] struct mwifiex_adapter *pcie_ops_group0 ; [L7508] int ldv_irq_1_2 = 0; [L7509] int LDV_IN_INTERRUPT = 1; [L7510] int ldv_irq_1_1 = 0; [L7511] int ldv_irq_line_1_3 ; [L7512] int ldv_state_variable_3 ; [L7513] int ldv_irq_line_1_0 ; [L7514] int ref_cnt ; [L7515] int ldv_irq_line_1_1 ; [L7516] int ldv_state_variable_1 ; [L7517] int ldv_irq_line_1_2 ; [L7518] int ldv_state_variable_4 ; [L7519] struct pci_dev *mwifiex_pcie_group0 ; [L7687-L7689] static struct mwifiex_pcie_card_reg const mwifiex_reg_8766 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 3288U, 3292U, 3296U, 3300U, 3304U, 3308U, 3312U, 0U, 63U, 0U, 63U, 0U, 128U, 128U, 128U, 0U, 0U, 0U, 0U, 0U, 0U, 1U}; [L7690-L7693] static struct mwifiex_pcie_card_reg const mwifiex_reg_8897 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 49292U, 49244U, 49244U, 49292U, 3304U, 3308U, 3312U, 16U, 67043328U, 134152192U, 1023U, 2047U, 67108864U, 1024U, 128U, 1U, 2U, 4U, 8U, 65536U, 1U, 0U}; [L7694] static struct mwifiex_pcie_device const mwifiex_pcie8766 = {"mrvl/pcie8766_uapsta.bin", & mwifiex_reg_8766, 256U, 2048U}; [L7695] static struct mwifiex_pcie_device const mwifiex_pcie8897 = {"mrvl/pcie8897_uapsta.bin", & mwifiex_reg_8897, 256U, 4096U}; [L7779] static u8 user_rmmod ; [L7781] static struct semaphore add_remove_card_sem ; [L8010-L8012] static struct pci_device_id const mwifiex_ids[3U] = { {4523U, 11056U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8766)}, {4523U, 11064U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8897)}}; [L8013] struct pci_device_id const __mod_pci__mwifiex_ids_device_table ; [L8014-L8017] static struct dev_pm_ops const mwifiex_pcie_pm_ops = {0, 0, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L8018-L8034] static struct pci_driver mwifiex_pcie = {{0, 0}, "mwifiex_pcie", (struct pci_device_id const *)(& mwifiex_ids), & mwifiex_pcie_probe, & mwifiex_pcie_remove, 0, 0, 0, 0, & mwifiex_pcie_shutdown, 0, 0, {0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_pcie_pm_ops, 0}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}; [L10694-L10700] static struct mwifiex_if_ops pcie_ops = {& mwifiex_pcie_init, & mwifiex_pcie_cleanup, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_pcie_enable_host_int, 0, & mwifiex_process_int_status, & mwifiex_pcie_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, (void (*)(struct mwifiex_adapter * , u16 ))0, (void (*)(struct mwifiex_adapter * ))0, & mwifiex_pcie_cmdrsp_complete, & mwifiex_pcie_event_complete, 0, & mwifiex_pcie_init_fw_port, 0, 0, 0, & mwifiex_clean_pcie_ring_buf}; [L10755] int ldv_retval_20 ; [L10757] int ldv_retval_18 ; [L10758] int ldv_retval_2 ; [L10759] int ldv_retval_5 ; [L10760] int ldv_retval_0 ; [L10762] int ldv_retval_11 ; [L10763] int ldv_retval_1 ; [L10765] int ldv_retval_15 ; [L10766] int ldv_retval_16 ; [L10771] int ldv_retval_8 ; [L10772] int ldv_retval_7 ; [L10773] int ldv_retval_19 ; [L10775] int ldv_retval_14 ; [L10776] int ldv_retval_17 ; [L10779] int ldv_retval_12 ; [L10781] int ldv_retval_6 ; [L10784] int ldv_retval_13 ; [L10785] int ldv_retval_9 ; [L10786] int ldv_retval_10 ; [L10788] int ldv_retval_4 ; [L10790] int ldv_retval_3 ; [L11484] Element set_impl[15] ; [L11485] int last_index = 0; [L11619] Set LDV_SKBS ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10945] struct pci_device_id *ldvarg0 ; [L10946] void *tmp ; [L10947] struct mwifiex_tx_param *ldvarg1 ; [L10948] void *tmp___0 ; [L10949] u32 ldvarg4 ; [L10950] u32 tmp___1 ; [L10951] struct mwifiex_fw_image *ldvarg3 ; [L10952] void *tmp___2 ; [L10953] u8 ldvarg2 ; [L10954] u8 tmp___3 ; [L10955] int tmp___4 ; [L10956] int tmp___5 ; [L10957] int tmp___6 ; [L10958] int tmp___7 ; [L10959] int tmp___8 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, user_rmmod=0] [L10961] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] tmp = ldv_zalloc(32UL) [L10962] ldvarg0 = (struct pci_device_id *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=4, tmp___0=1, user_rmmod=0] [L10963] RET, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] tmp___0 = ldv_zalloc(4UL) [L10964] ldvarg1 = (struct mwifiex_tx_param *)tmp___0 [L10965] tmp___1 = __VERIFIER_nondet_u32() [L10966] ldvarg4 = tmp___1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, user_rmmod=0] [L10967] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, user_rmmod=0] [L10967] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, user_rmmod=0] [L10967] tmp___2 = ldv_zalloc(32UL) [L10968] ldvarg3 = (struct mwifiex_fw_image *)tmp___2 [L10969] tmp___3 = __VERIFIER_nondet_u8() [L10970] ldvarg2 = tmp___3 [L10971] CALL ldv_initialize() [L11638] CALL ldv_set_init(LDV_SKBS) [L11490] set = set_impl [L11491] last_index = 0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={370:0}, set_impl={370:0}, user_rmmod=0] [L11638] RET ldv_set_init(LDV_SKBS) [L10971] RET ldv_initialize() [L10972] ldv_state_variable_4 = 0 [L10973] ldv_state_variable_1 = 1 [L10974] ref_cnt = 0 [L10975] ldv_state_variable_0 = 1 [L10976] ldv_state_variable_3 = 0 [L10977] ldv_state_variable_2 = 0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: [L11209] case 1: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=1, user_rmmod=0] [L11210] COND TRUE ldv_state_variable_0 == 1 [L11211] CALL, EXPR mwifiex_pcie_init_module() [L10703] int ret ; [L10704] struct _ddebug descriptor ; [L10705] long tmp ; [L10706] struct _ddebug descriptor___0 ; [L10707] long tmp___0 ; [L10709] descriptor.modname = "mwifiex_pcie" [L10710] descriptor.function = "mwifiex_pcie_init_module" [L10711] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10712] descriptor.format = "Marvell PCIe Driver\n" [L10713] descriptor.lineno = 2464U [L10714] descriptor.flags = 0U [L10715] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor.flags=0, descriptor___0={377:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); VAL [\old(c)=0, \old(exp)=-2, \result=-2, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, c=0, exp=-2, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor.flags=0, descriptor___0={377:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L10716] COND TRUE tmp != 0L [L10720] CALL sema_init(& add_remove_card_sem, 1) [L7532] struct lock_class_key __key ; [L7533] struct semaphore __constr_expr_0 ; [L7535] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7536] __constr_expr_0.lock.magic = 3735899821U [L7537] __constr_expr_0.lock.owner_cpu = 4294967295U [L7538] __constr_expr_0.lock.owner = (void *)-1 [L7539] __constr_expr_0.lock.dep_map.key = 0 [L7540] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7541] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7542] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7543] __constr_expr_0.lock.dep_map.cpu = 0 [L7544] __constr_expr_0.lock.dep_map.ip = 0UL [L7545] __constr_expr_0.count = (unsigned int )val [L7546] __constr_expr_0.wait_list.next = & sem->wait_list [L7547] __constr_expr_0.wait_list.prev = & sem->wait_list [L7548] *sem = __constr_expr_0 [L7549] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7550] return; [L7550] return; VAL [\old(val)=1, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, sem={365:0}, sem={365:0}, set_impl={370:0}, user_rmmod=0, val=1] [L10720] RET sema_init(& add_remove_card_sem, 1) [L10721] user_rmmod = 0U [L10722] CALL, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L11712] return __VERIFIER_nondet_int(); [L10722] RET, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10722] ret = __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10723] COND FALSE !(ret != 0) [L10726] descriptor___0.modname = "mwifiex_pcie" [L10727] descriptor___0.function = "mwifiex_pcie_init_module" [L10728] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10729] descriptor___0.format = "info: Driver registered successfully!\n" [L10730] descriptor___0.lineno = 2475U [L10731] descriptor___0.flags = 0U [L10732] EXPR descriptor___0.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor___0={377:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=-2, user_rmmod=0] [L10732] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); VAL [\old(c)=0, \old(exp)=-3, \result=-3, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, c=0, exp=-3, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10732] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, descriptor={378:0}, descriptor___0={377:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=-2, user_rmmod=0] [L10732] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L10733] COND TRUE tmp___0 != 0L [L10738] return (ret); [L10738] return (ret); [L10738] return (ret); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=-2, tmp___0=-3, user_rmmod=0] [L11211] RET, EXPR mwifiex_pcie_init_module() [L11211] ldv_retval_19 = mwifiex_pcie_init_module() [L11212] COND FALSE !(ldv_retval_19 != 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=1, user_rmmod=0] [L11217] COND TRUE ldv_retval_19 == 0 [L11218] ldv_state_variable_0 = 2 [L11219] ldv_state_variable_2 = 1 [L11220] CALL ldv_initialize_mwifiex_if_ops_2() [L10899] void *tmp ; [L10900] void *tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=6864, tmp___0=1, user_rmmod=0] [L10902] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] tmp = ldv_zalloc(6864UL) [L10903] pcie_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=232, tmp___0=1, user_rmmod=0] [L10904] RET, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] tmp___0 = ldv_zalloc(232UL) [L10905] pcie_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, user_rmmod=0] [L11220] RET ldv_initialize_mwifiex_if_ops_2() [L11221] ldv_state_variable_3 = 1 [L11222] CALL ldv_initialize_pci_driver_3() [L10890] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] CALL, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=2976, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=2976, tmp___0=1, user_rmmod=0] [L10892] RET, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(2976UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] tmp = ldv_zalloc(2976UL) [L10893] mwifiex_pcie_group0 = (struct pci_dev *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L11222] RET ldv_initialize_pci_driver_3() [L11223] ldv_state_variable_4 = 1 [L11224] CALL ldv_dev_pm_ops_4() [L10911] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=1416, tmp___0=1, user_rmmod=0] [L10913] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] tmp = ldv_zalloc(1416UL) [L10914] mwifiex_pcie_pm_ops_group1 = (struct device *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L11224] RET ldv_dev_pm_ops_4() [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11237] case 3: [L11280] case 4: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=4, tmp___6=1, user_rmmod=0] [L11281] COND TRUE ldv_state_variable_2 != 0 [L11282] tmp___8 = __VERIFIER_nondet_int() [L11284] case 0: [L11291] case 1: [L11298] case 2: [L11305] case 3: [L11312] case 4: [L11319] case 5: [L11326] case 6: [L11333] case 7: [L11340] case 8: [L11347] case 9: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L11348] COND TRUE ldv_state_variable_2 == 1 [L11349] CALL mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L9904] int ret ; [L9905] u8 *firmware ; [L9906] u32 firmware_len ; [L9907] u32 offset ; [L9908] struct sk_buff *skb ; [L9909] u32 txlen ; [L9910] u32 tx_blocks ; [L9911] u32 tries ; [L9912] u32 len ; [L9913] u32 block_retry_cnt ; [L9914] struct pcie_service_card *card ; [L9915] struct mwifiex_pcie_card_reg const *reg ; [L9916] struct _ddebug descriptor ; [L9917] long tmp ; [L9918] int tmp___0 ; [L9919] u32 ireg_intr ; [L9920] struct _ddebug descriptor___0 ; [L9921] long tmp___1 ; [L9922] int tmp___2 ; [L9923] int tmp___3 ; [L9924] struct _ddebug descriptor___1 ; [L9925] long tmp___4 ; [L9927] EXPR fw->fw_buf [L9927] firmware = fw->fw_buf [L9928] EXPR fw->fw_len [L9928] firmware_len = fw->fw_len [L9929] offset = 0U [L9930] tx_blocks = 0U [L9931] block_retry_cnt = 0U [L9932] EXPR adapter->card [L9932] card = (struct pcie_service_card *)adapter->card [L9933] EXPR card->pcie.reg [L9933] reg = card->pcie.reg [L9934] COND FALSE !((unsigned long )firmware == (unsigned long )((u8 *)0U) || firmware_len == 0U) [L9939] descriptor.modname = "mwifiex_pcie" [L9940] descriptor.function = "mwifiex_prog_fw_w_helper" [L9941] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L9942] descriptor.format = "info: Downloading FW image (%d bytes)\n" [L9943] descriptor.lineno = 1857U [L9944] descriptor.flags = 0U [L9945] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor.flags=0, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); VAL [\old(c)=0, \old(exp)=-5, \result=-5, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, c=0, exp=-5, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L9945] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor.flags=0, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-5, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L9946] COND TRUE tmp != 0L [L9947] adapter->dev VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tx_blocks=0, user_rmmod=0] [L9951] CALL, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8209] int tmp ; [L8210] bool tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] CALL, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7823] u32 *cookie_addr ; [L7824] struct pcie_service_card *card ; [L7825] struct mwifiex_pcie_card_reg const *reg ; [L7826] struct _ddebug descriptor ; [L7827] long tmp ; [L7829] EXPR adapter->card [L7829] card = (struct pcie_service_card *)adapter->card [L7830] EXPR card->pcie.reg [L7830] reg = card->pcie.reg [L7831] EXPR reg->sleep_cookie VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, descriptor={381:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, reg->sleep_cookie=-255, set_impl={370:0}, user_rmmod=0] [L7831] COND FALSE !((unsigned int )((unsigned char )reg->sleep_cookie) == 0U) [L7835] EXPR card->sleep_cookie_vbase VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, card->sleep_cookie_vbase={0:0}, descriptor={381:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, user_rmmod=0] [L7835] COND FALSE !((unsigned long )card->sleep_cookie_vbase != (unsigned long )((u8 *)0U)) [L7855] return (0); [L7855] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, user_rmmod=0] [L8212] RET, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_ok_to_access_hw(adapter)=0, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] tmp___0 = mwifiex_pcie_ok_to_access_hw(adapter) [L8213] COND FALSE !((int )tmp___0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L8222] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L9951] RET, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_disable_host_int(adapter)=0, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tx_blocks=0, user_rmmod=0] [L9951] tmp___0 = mwifiex_pcie_disable_host_int(adapter) [L9952] COND FALSE !(tmp___0 != 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] CALL, EXPR ldv_dev_alloc_skb_14(2312U) VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11450] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11622] void *skb ; [L11623] void *tmp___7 ; VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND FALSE !(tmp___0 != 0) [L7447] EXPR, FCALL calloc(1UL, size) [L7447] tmp = calloc(1UL, size) [L7448] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551615:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L7449] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7418] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7449] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551615:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L7450] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551615:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551615:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L11625] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551615:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L11626] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, user_rmmod=0] [L11627] COND FALSE !(! skb) [L11630] CALL ldv_set_add(LDV_SKBS, skb) [L11498] int i ; [L11500] i = 0 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11501] COND TRUE 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11502] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11512] COND TRUE last_index < 15 [L11513] set_impl[last_index] = e [L11514] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11630] RET ldv_set_add(LDV_SKBS, skb) [L11631] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551615:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, user_rmmod=0] [L11452] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_skb_alloc()={-18446744073709551615:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] tmp = ldv_skb_alloc() [L11453] return (tmp); VAL [\old(last_index)=0, \old(length)=2312, \result={-18446744073709551615:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={-18446744073709551615:0}, user_rmmod=0] [L9958] RET, EXPR ldv_dev_alloc_skb_14(2312U) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, ldv_dev_alloc_skb_14(2312U)={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] skb = ldv_dev_alloc_skb_14(2312U) [L9959] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9965] ireg_intr = 0U VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9966] COND FALSE !(offset >= firmware_len) [L9970] tries = 0U VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9986] COND TRUE tries <= 99U VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] EXPR reg->cmd_size VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, reg->cmd_size=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] CALL, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8046] struct pcie_service_card *card ; [L8048] EXPR adapter->card [L8048] card = (struct pcie_service_card *)adapter->card [L8049] EXPR card->pci_mmap1 [L8049] CALL, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L11765] return __VERIFIER_nondet_uint(); [L8049] RET, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L8049] *data = ioread32(card->pci_mmap1 + (unsigned long )reg) [L8050] return (0); VAL [\old(reg)=0, \result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={372:-31}, data={374:0}, data={374:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg=0, set_impl={370:0}, user_rmmod=0] [L9973] RET, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_read_reg(adapter, (int )reg->cmd_size, & len)=0, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, reg->cmd_size=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] ret = mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) [L9974] COND FALSE !(ret != 0) [L9979] EXPR \read(len) VAL [\read(len)=-4294964983, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9979] COND TRUE len != 0U [L9991] EXPR \read(len) VAL [\read(len)=-4294964983, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9991] COND FALSE !(len == 0U) [L9994] EXPR \read(len) VAL [\read(len)=-4294964983, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=0, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9994] COND TRUE len > 2312U [L9996] \read(len) [L9997] ret = -1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=-1, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10076] CALL dev_kfree_skb_any(skb) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7578] FCALL __dev_kfree_skb_any(skb, 1) [L10076] RET dev_kfree_skb_any(skb) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, descriptor={375:0}, descriptor___0={373:0}, descriptor___1={376:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={372:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={374:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=-1, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); VAL [\result=-1, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={372:-31}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={-18446744073709551615:0}, ret=-1, set_impl={370:0}, skb={-18446744073709551615:0}, tmp=-5, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L11349] RET mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L11350] ldv_state_variable_2 = 1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=1, tmp___8=9, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=0] [L11202] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L11203] CALL mwifiex_pcie_cleanup_module() [L10743] int tmp ; [L10745] CALL, EXPR down_interruptible(& add_remove_card_sem) [L11758] return __VERIFIER_nondet_int(); [L10745] RET, EXPR down_interruptible(& add_remove_card_sem) [L10745] tmp = down_interruptible(& add_remove_card_sem) [L10746] COND FALSE !(tmp == 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp=1, user_rmmod=0] [L10750] user_rmmod = 1U [L10751] FCALL pci_unregister_driver(& mwifiex_pcie) [L11203] RET mwifiex_pcie_cleanup_module() [L11204] ldv_state_variable_0 = 3 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=43, ldvarg3={0:0}, ldvarg4=41, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=41, tmp___2={0:0}, tmp___3=43, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=1] [L11402] CALL ldv_check_final_state() [L11689] int tmp___7 ; [L11691] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L11580] return (last_index == 0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=1] [L11691] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L11691] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L11692] COND FALSE !(\read(tmp___7)) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___7=0, user_rmmod=1] [L11694] CALL ldv_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] [L7474] reach_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967364:4294967343}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 58 procedures, 1563 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 123.2s, OverallIterations: 11, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 113.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 17 mSolverCounterUnknown, 21811 SdHoareTripleChecker+Valid, 108.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 19859 mSDsluCounter, 142993 SdHoareTripleChecker+Invalid, 100.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 111483 mSDsCounter, 8833 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 27501 IncrementalHoareTripleChecker+Invalid, 36351 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 8833 mSolverCounterUnsat, 31510 mSDtfsCounter, 27501 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 351 GetRequests, 272 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 83 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=7518occurred in iteration=9, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.8s AutomataMinimizationTime, 10 MinimizatonAttempts, 26546 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 2.3s SatisfiabilityAnalysisTime, 3.1s InterpolantComputationTime, 1594 NumberOfCodeBlocks, 1594 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 1397 ConstructedInterpolants, 0 QuantifiedInterpolants, 3132 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 10 InterpolantComputations, 10 PerfectInterpolantSequences, 991/991 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 17:19:14,577 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 17:19:15,933 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 17:19:15,934 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 17:19:15,956 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 17:19:15,957 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 17:19:15,958 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 17:19:15,959 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 17:19:15,961 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 17:19:15,963 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 17:19:15,963 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 17:19:15,964 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 17:19:15,965 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 17:19:15,966 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 17:19:15,967 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 17:19:15,968 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 17:19:15,969 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 17:19:15,970 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 17:19:15,971 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 17:19:15,972 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 17:19:15,974 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 17:19:15,976 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 17:19:15,977 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 17:19:15,978 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 17:19:15,979 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 17:19:15,982 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 17:19:15,982 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 17:19:15,982 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 17:19:15,983 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 17:19:15,984 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 17:19:15,984 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 17:19:15,985 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 17:19:15,985 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 17:19:15,986 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 17:19:15,987 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 17:19:15,988 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 17:19:15,988 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 17:19:15,989 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 17:19:15,989 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 17:19:15,989 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 17:19:15,990 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 17:19:15,991 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 17:19:15,991 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-06 17:19:16,015 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 17:19:16,015 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 17:19:16,016 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 17:19:16,016 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 17:19:16,016 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 17:19:16,017 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 17:19:16,017 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 17:19:16,017 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 17:19:16,017 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 17:19:16,018 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 17:19:16,018 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 17:19:16,018 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 17:19:16,018 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 17:19:16,018 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 17:19:16,018 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-06 17:19:16,018 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-06 17:19:16,019 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-06 17:19:16,019 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 17:19:16,019 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 17:19:16,019 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 17:19:16,019 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 17:19:16,019 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 17:19:16,019 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 17:19:16,020 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 17:19:16,020 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 17:19:16,020 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 17:19:16,020 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 17:19:16,020 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-06 17:19:16,020 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-06 17:19:16,022 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 17:19:16,022 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 17:19:16,022 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 17:19:16,022 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 17:19:16,023 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-06 17:19:16,023 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2021-12-06 17:19:16,262 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 17:19:16,277 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 17:19:16,279 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 17:19:16,279 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 17:19:16,280 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 17:19:16,281 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-12-06 17:19:16,323 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/0daee4a26/f3e4e6c0fc9a406996978ed119e7b7a7/FLAGd788b160f [2021-12-06 17:19:16,932 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 17:19:16,933 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-12-06 17:19:16,968 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/0daee4a26/f3e4e6c0fc9a406996978ed119e7b7a7/FLAGd788b160f [2021-12-06 17:19:17,302 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/data/0daee4a26/f3e4e6c0fc9a406996978ed119e7b7a7 [2021-12-06 17:19:17,304 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 17:19:17,305 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 17:19:17,306 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 17:19:17,306 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 17:19:17,308 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 17:19:17,309 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 05:19:17" (1/1) ... [2021-12-06 17:19:17,310 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@48dfd175 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:17, skipping insertion in model container [2021-12-06 17:19:17,310 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 05:19:17" (1/1) ... [2021-12-06 17:19:17,316 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 17:19:17,412 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 17:19:18,181 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-12-06 17:19:18,967 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 17:19:18,992 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-06 17:19:19,020 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 17:19:19,114 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-12-06 17:19:19,347 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 17:19:19,364 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 17:19:19,491 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2021-12-06 17:19:19,653 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 17:19:19,735 INFO L208 MainTranslator]: Completed translation [2021-12-06 17:19:19,735 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19 WrapperNode [2021-12-06 17:19:19,736 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 17:19:19,736 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 17:19:19,736 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 17:19:19,737 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 17:19:19,742 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:19,808 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:19,941 INFO L137 Inliner]: procedures = 262, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6145 [2021-12-06 17:19:19,941 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 17:19:19,942 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 17:19:19,942 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 17:19:19,942 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 17:19:19,948 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:19,949 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:19,968 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:19,968 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:20,077 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:20,108 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:20,128 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:20,150 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 17:19:20,150 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 17:19:20,151 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 17:19:20,151 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 17:19:20,151 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (1/1) ... [2021-12-06 17:19:20,157 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 17:19:20,165 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 17:19:20,176 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 17:19:20,179 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 17:19:20,217 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-06 17:19:20,217 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-06 17:19:20,217 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-06 17:19:20,217 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2021-12-06 17:19:20,217 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2021-12-06 17:19:20,217 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-06 17:19:20,217 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-06 17:19:20,218 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 17:19:20,218 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-06 17:19:20,218 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 17:19:20,218 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 17:19:20,218 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 17:19:20,218 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-06 17:19:20,218 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-06 17:19:20,218 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-12-06 17:19:20,218 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2021-12-06 17:19:20,219 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 17:19:20,219 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 17:19:20,219 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2021-12-06 17:19:20,219 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2021-12-06 17:19:20,219 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-06 17:19:20,219 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-06 17:19:20,219 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-06 17:19:20,219 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-06 17:19:20,219 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-12-06 17:19:20,219 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-12-06 17:19:20,220 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-12-06 17:19:20,220 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-12-06 17:19:20,220 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2021-12-06 17:19:20,220 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2021-12-06 17:19:20,220 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-12-06 17:19:20,220 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-12-06 17:19:20,220 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 17:19:20,220 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 17:19:20,220 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2021-12-06 17:19:20,220 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2021-12-06 17:19:20,221 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 17:19:20,221 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 17:19:20,221 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 17:19:20,221 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 17:19:20,221 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2021-12-06 17:19:20,221 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2021-12-06 17:19:20,221 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-12-06 17:19:20,221 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-12-06 17:19:20,221 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2021-12-06 17:19:20,221 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2021-12-06 17:19:20,222 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 17:19:20,222 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 17:19:20,222 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2021-12-06 17:19:20,222 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2021-12-06 17:19:20,222 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-12-06 17:19:20,222 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-06 17:19:20,222 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-06 17:19:20,222 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2021-12-06 17:19:20,222 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2021-12-06 17:19:20,222 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2021-12-06 17:19:20,223 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2021-12-06 17:19:20,223 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2021-12-06 17:19:20,223 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-06 17:19:20,224 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-06 17:19:20,224 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-06 17:19:20,224 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-06 17:19:20,224 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2021-12-06 17:19:20,224 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2021-12-06 17:19:20,224 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-12-06 17:19:20,224 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-12-06 17:19:20,224 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2021-12-06 17:19:20,224 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2021-12-06 17:19:20,225 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 17:19:20,225 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 17:19:20,225 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2021-12-06 17:19:20,225 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2021-12-06 17:19:20,225 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2021-12-06 17:19:20,225 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2021-12-06 17:19:20,225 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2021-12-06 17:19:20,225 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2021-12-06 17:19:20,225 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2021-12-06 17:19:20,225 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2021-12-06 17:19:20,225 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2021-12-06 17:19:20,225 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2021-12-06 17:19:20,226 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 17:19:20,226 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 17:19:20,226 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2021-12-06 17:19:20,226 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2021-12-06 17:19:20,226 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2021-12-06 17:19:20,226 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2021-12-06 17:19:20,226 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2021-12-06 17:19:20,226 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2021-12-06 17:19:20,226 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-12-06 17:19:20,226 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-12-06 17:19:20,226 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2021-12-06 17:19:20,227 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2021-12-06 17:19:20,227 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 17:19:20,227 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 17:19:20,227 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2021-12-06 17:19:20,227 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2021-12-06 17:19:20,227 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2021-12-06 17:19:20,227 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2021-12-06 17:19:20,227 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2021-12-06 17:19:20,227 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2021-12-06 17:19:20,227 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-12-06 17:19:20,227 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-12-06 17:19:20,227 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2021-12-06 17:19:20,228 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 17:19:20,228 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-06 17:19:20,228 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-06 17:19:20,228 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2021-12-06 17:19:20,228 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2021-12-06 17:19:20,229 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2021-12-06 17:19:20,229 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-12-06 17:19:20,229 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-06 17:19:20,229 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2021-12-06 17:19:20,230 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2021-12-06 17:19:20,230 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2021-12-06 17:19:20,230 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2021-12-06 17:19:20,230 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-06 17:19:20,230 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-06 17:19:20,230 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-06 17:19:20,230 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-06 17:19:20,230 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 17:19:20,230 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 17:19:20,230 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2021-12-06 17:19:20,230 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2021-12-06 17:19:20,230 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2021-12-06 17:19:20,230 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2021-12-06 17:19:20,761 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 17:19:20,763 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 17:19:27,895 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 17:20:16,850 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 17:20:16,864 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 17:20:16,864 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 17:20:16,867 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:20:16 BoogieIcfgContainer [2021-12-06 17:20:16,867 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 17:20:16,869 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 17:20:16,869 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 17:20:16,871 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 17:20:16,871 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 05:19:17" (1/3) ... [2021-12-06 17:20:16,871 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c8e16e2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 05:20:16, skipping insertion in model container [2021-12-06 17:20:16,871 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:19:19" (2/3) ... [2021-12-06 17:20:16,872 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c8e16e2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 05:20:16, skipping insertion in model container [2021-12-06 17:20:16,872 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:20:16" (3/3) ... [2021-12-06 17:20:16,873 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2021-12-06 17:20:16,876 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 17:20:16,877 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 17:20:16,927 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 17:20:16,932 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 17:20:16,932 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 17:20:16,968 INFO L276 IsEmpty]: Start isEmpty. Operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2021-12-06 17:20:16,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-12-06 17:20:16,977 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:16,977 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:16,978 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:16,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:16,982 INFO L85 PathProgramCache]: Analyzing trace with hash -1790507018, now seen corresponding path program 1 times [2021-12-06 17:20:16,994 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:16,995 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [710218389] [2021-12-06 17:20:16,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:16,995 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:16,995 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:16,996 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:17,001 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-06 17:20:17,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:17,965 INFO L263 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 17:20:17,970 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:18,155 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 17:20:18,155 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:18,156 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:18,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [710218389] [2021-12-06 17:20:18,156 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [710218389] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:18,156 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:18,157 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 17:20:18,158 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [369674047] [2021-12-06 17:20:18,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:18,162 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 17:20:18,162 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:18,185 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 17:20:18,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:20:18,191 INFO L87 Difference]: Start difference. First operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-06 17:20:18,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:18,710 INFO L93 Difference]: Finished difference Result 4627 states and 6891 transitions. [2021-12-06 17:20:18,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 17:20:18,712 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2021-12-06 17:20:18,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:18,749 INFO L225 Difference]: With dead ends: 4627 [2021-12-06 17:20:18,749 INFO L226 Difference]: Without dead ends: 3042 [2021-12-06 17:20:18,760 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:20:18,762 INFO L933 BasicCegarLoop]: 2602 mSDtfsCounter, 2242 mSDsluCounter, 2266 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2242 SdHoareTripleChecker+Valid, 4868 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:18,763 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2242 Valid, 4868 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 17:20:18,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3042 states. [2021-12-06 17:20:18,916 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3042 to 3042. [2021-12-06 17:20:18,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3042 states, 2325 states have (on average 1.4055913978494623) internal successors, (3268), 2349 states have internal predecessors, (3268), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2021-12-06 17:20:18,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3042 states to 3042 states and 4479 transitions. [2021-12-06 17:20:18,946 INFO L78 Accepts]: Start accepts. Automaton has 3042 states and 4479 transitions. Word has length 39 [2021-12-06 17:20:18,947 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:18,947 INFO L470 AbstractCegarLoop]: Abstraction has 3042 states and 4479 transitions. [2021-12-06 17:20:18,947 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-06 17:20:18,947 INFO L276 IsEmpty]: Start isEmpty. Operand 3042 states and 4479 transitions. [2021-12-06 17:20:18,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-06 17:20:18,952 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:18,953 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:18,981 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-06 17:20:19,153 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:19,154 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:19,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:19,155 INFO L85 PathProgramCache]: Analyzing trace with hash 1277499630, now seen corresponding path program 1 times [2021-12-06 17:20:19,158 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:19,158 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1285040463] [2021-12-06 17:20:19,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:19,158 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:19,159 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:19,160 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:19,161 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-06 17:20:20,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:20,582 INFO L263 TraceCheckSpWp]: Trace formula consists of 1851 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 17:20:20,587 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:20,859 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 17:20:20,859 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:20,859 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:20,859 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1285040463] [2021-12-06 17:20:20,859 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1285040463] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:20,860 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:20,860 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:20:20,860 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995261390] [2021-12-06 17:20:20,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:20,861 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:20:20,861 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:20,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:20:20,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:20:20,862 INFO L87 Difference]: Start difference. First operand 3042 states and 4479 transitions. Second operand has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:20:24,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:24,724 INFO L93 Difference]: Finished difference Result 6992 states and 10407 transitions. [2021-12-06 17:20:24,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 17:20:24,726 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2021-12-06 17:20:24,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:24,753 INFO L225 Difference]: With dead ends: 6992 [2021-12-06 17:20:24,754 INFO L226 Difference]: Without dead ends: 3960 [2021-12-06 17:20:24,766 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:20:24,767 INFO L933 BasicCegarLoop]: 3489 mSDtfsCounter, 1089 mSDsluCounter, 12720 mSDsCounter, 0 mSdLazyCounter, 552 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1299 SdHoareTripleChecker+Valid, 16209 SdHoareTripleChecker+Invalid, 552 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 552 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:24,767 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1299 Valid, 16209 Invalid, 552 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 552 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2021-12-06 17:20:24,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3960 states. [2021-12-06 17:20:24,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3960 to 3042. [2021-12-06 17:20:24,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3042 states, 2325 states have (on average 1.4051612903225807) internal successors, (3267), 2349 states have internal predecessors, (3267), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2021-12-06 17:20:24,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3042 states to 3042 states and 4478 transitions. [2021-12-06 17:20:24,887 INFO L78 Accepts]: Start accepts. Automaton has 3042 states and 4478 transitions. Word has length 49 [2021-12-06 17:20:24,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:24,888 INFO L470 AbstractCegarLoop]: Abstraction has 3042 states and 4478 transitions. [2021-12-06 17:20:24,888 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:20:24,888 INFO L276 IsEmpty]: Start isEmpty. Operand 3042 states and 4478 transitions. [2021-12-06 17:20:24,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-06 17:20:24,890 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:24,890 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:24,925 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-06 17:20:25,091 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:25,092 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:25,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:25,094 INFO L85 PathProgramCache]: Analyzing trace with hash 266382380, now seen corresponding path program 1 times [2021-12-06 17:20:25,099 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:25,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [210495823] [2021-12-06 17:20:25,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:25,100 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:25,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:25,102 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:25,105 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-06 17:20:26,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:26,646 INFO L263 TraceCheckSpWp]: Trace formula consists of 1851 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 17:20:26,649 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:26,994 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 17:20:26,995 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:26,995 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:26,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [210495823] [2021-12-06 17:20:26,995 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [210495823] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:26,995 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:26,995 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 17:20:26,995 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1726694348] [2021-12-06 17:20:26,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:26,996 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 17:20:26,996 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:26,996 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 17:20:26,996 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:20:26,997 INFO L87 Difference]: Start difference. First operand 3042 states and 4478 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:20:27,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:27,466 INFO L93 Difference]: Finished difference Result 9103 states and 13430 transitions. [2021-12-06 17:20:27,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 17:20:27,466 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2021-12-06 17:20:27,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:27,498 INFO L225 Difference]: With dead ends: 9103 [2021-12-06 17:20:27,498 INFO L226 Difference]: Without dead ends: 6062 [2021-12-06 17:20:27,508 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 45 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:20:27,509 INFO L933 BasicCegarLoop]: 2682 mSDtfsCounter, 2241 mSDsluCounter, 7622 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2241 SdHoareTripleChecker+Valid, 10304 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:27,509 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2241 Valid, 10304 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 17:20:27,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6062 states. [2021-12-06 17:20:27,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6062 to 6062. [2021-12-06 17:20:27,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6062 states, 4633 states have (on average 1.4055687459529462) internal successors, (6512), 4681 states have internal predecessors, (6512), 1208 states have call successors, (1208), 221 states have call predecessors, (1208), 220 states have return successors, (1219), 1207 states have call predecessors, (1219), 1207 states have call successors, (1219) [2021-12-06 17:20:27,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6062 states to 6062 states and 8939 transitions. [2021-12-06 17:20:27,717 INFO L78 Accepts]: Start accepts. Automaton has 6062 states and 8939 transitions. Word has length 49 [2021-12-06 17:20:27,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:27,717 INFO L470 AbstractCegarLoop]: Abstraction has 6062 states and 8939 transitions. [2021-12-06 17:20:27,717 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:20:27,717 INFO L276 IsEmpty]: Start isEmpty. Operand 6062 states and 8939 transitions. [2021-12-06 17:20:27,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-06 17:20:27,730 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:27,730 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:27,762 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-06 17:20:27,931 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:27,932 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:27,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:27,934 INFO L85 PathProgramCache]: Analyzing trace with hash -969454711, now seen corresponding path program 1 times [2021-12-06 17:20:27,939 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:27,940 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1055654886] [2021-12-06 17:20:27,940 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:27,940 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:27,941 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:27,943 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:27,945 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-06 17:20:29,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:29,930 INFO L263 TraceCheckSpWp]: Trace formula consists of 2167 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 17:20:29,934 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:30,423 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-12-06 17:20:30,423 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:30,423 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:30,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1055654886] [2021-12-06 17:20:30,424 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1055654886] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:30,424 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:30,424 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 17:20:30,424 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349968736] [2021-12-06 17:20:30,424 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:30,424 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 17:20:30,425 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:30,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 17:20:30,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:20:30,425 INFO L87 Difference]: Start difference. First operand 6062 states and 8939 transitions. Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-06 17:20:31,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:31,442 INFO L93 Difference]: Finished difference Result 13455 states and 19819 transitions. [2021-12-06 17:20:31,443 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 17:20:31,443 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2021-12-06 17:20:31,443 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:31,483 INFO L225 Difference]: With dead ends: 13455 [2021-12-06 17:20:31,483 INFO L226 Difference]: Without dead ends: 7403 [2021-12-06 17:20:31,502 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:20:31,503 INFO L933 BasicCegarLoop]: 2320 mSDtfsCounter, 519 mSDsluCounter, 2210 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 519 SdHoareTripleChecker+Valid, 4530 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:31,503 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [519 Valid, 4530 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-06 17:20:31,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7403 states. [2021-12-06 17:20:31,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7403 to 7391. [2021-12-06 17:20:31,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7391 states, 5740 states have (on average 1.418815331010453) internal successors, (8144), 5788 states have internal predecessors, (8144), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 289 states have return successors, (1372), 1360 states have call predecessors, (1372), 1360 states have call successors, (1372) [2021-12-06 17:20:31,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7391 states to 7391 states and 10877 transitions. [2021-12-06 17:20:31,807 INFO L78 Accepts]: Start accepts. Automaton has 7391 states and 10877 transitions. Word has length 117 [2021-12-06 17:20:31,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:31,807 INFO L470 AbstractCegarLoop]: Abstraction has 7391 states and 10877 transitions. [2021-12-06 17:20:31,808 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-06 17:20:31,808 INFO L276 IsEmpty]: Start isEmpty. Operand 7391 states and 10877 transitions. [2021-12-06 17:20:31,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2021-12-06 17:20:31,820 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:31,820 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:31,858 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-06 17:20:32,020 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:32,021 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:32,022 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:32,022 INFO L85 PathProgramCache]: Analyzing trace with hash 104842639, now seen corresponding path program 1 times [2021-12-06 17:20:32,024 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:32,024 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [25827975] [2021-12-06 17:20:32,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:32,024 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:32,025 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:32,025 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:32,026 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-06 17:20:33,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:33,623 INFO L263 TraceCheckSpWp]: Trace formula consists of 2274 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 17:20:33,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:34,230 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 73 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2021-12-06 17:20:34,230 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:34,230 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:34,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [25827975] [2021-12-06 17:20:34,230 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [25827975] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:34,230 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:34,230 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 17:20:34,231 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [862851403] [2021-12-06 17:20:34,231 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:34,231 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 17:20:34,231 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:34,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 17:20:34,232 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:20:34,232 INFO L87 Difference]: Start difference. First operand 7391 states and 10877 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-06 17:20:36,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:36,443 INFO L93 Difference]: Finished difference Result 15179 states and 22309 transitions. [2021-12-06 17:20:36,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 17:20:36,444 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 157 [2021-12-06 17:20:36,444 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:36,493 INFO L225 Difference]: With dead ends: 15179 [2021-12-06 17:20:36,494 INFO L226 Difference]: Without dead ends: 7795 [2021-12-06 17:20:36,516 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 153 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:20:36,517 INFO L933 BasicCegarLoop]: 4380 mSDtfsCounter, 2244 mSDsluCounter, 11024 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2244 SdHoareTripleChecker+Valid, 15404 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:36,517 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2244 Valid, 15404 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2021-12-06 17:20:36,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7795 states. [2021-12-06 17:20:36,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7795 to 7430. [2021-12-06 17:20:36,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7430 states, 5770 states have (on average 1.416637781629116) internal successors, (8174), 5821 states have internal predecessors, (8174), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2021-12-06 17:20:36,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7430 states to 7430 states and 10919 transitions. [2021-12-06 17:20:36,857 INFO L78 Accepts]: Start accepts. Automaton has 7430 states and 10919 transitions. Word has length 157 [2021-12-06 17:20:36,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:36,858 INFO L470 AbstractCegarLoop]: Abstraction has 7430 states and 10919 transitions. [2021-12-06 17:20:36,858 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-06 17:20:36,858 INFO L276 IsEmpty]: Start isEmpty. Operand 7430 states and 10919 transitions. [2021-12-06 17:20:36,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2021-12-06 17:20:36,871 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:36,871 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:36,914 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2021-12-06 17:20:37,072 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:37,072 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:37,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:37,073 INFO L85 PathProgramCache]: Analyzing trace with hash -1933743724, now seen corresponding path program 1 times [2021-12-06 17:20:37,074 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:37,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2005124529] [2021-12-06 17:20:37,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:37,074 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:37,074 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:37,075 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:37,076 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-06 17:20:38,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:38,908 INFO L263 TraceCheckSpWp]: Trace formula consists of 2331 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 17:20:38,914 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:39,616 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2021-12-06 17:20:39,616 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:39,616 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:39,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2005124529] [2021-12-06 17:20:39,616 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2005124529] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:39,616 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:39,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:20:39,617 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204920885] [2021-12-06 17:20:39,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:39,617 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:20:39,618 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:39,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:20:39,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:20:39,618 INFO L87 Difference]: Start difference. First operand 7430 states and 10919 transitions. Second operand has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-06 17:20:43,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:43,301 INFO L93 Difference]: Finished difference Result 15001 states and 22076 transitions. [2021-12-06 17:20:43,302 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 17:20:43,302 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2021-12-06 17:20:43,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:43,330 INFO L225 Difference]: With dead ends: 15001 [2021-12-06 17:20:43,330 INFO L226 Difference]: Without dead ends: 7588 [2021-12-06 17:20:43,348 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:20:43,349 INFO L933 BasicCegarLoop]: 2469 mSDtfsCounter, 1080 mSDsluCounter, 8563 mSDsCounter, 0 mSdLazyCounter, 326 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1289 SdHoareTripleChecker+Valid, 11032 SdHoareTripleChecker+Invalid, 326 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 326 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:43,349 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1289 Valid, 11032 Invalid, 326 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 326 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2021-12-06 17:20:43,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7588 states. [2021-12-06 17:20:43,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7588 to 7430. [2021-12-06 17:20:43,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7430 states, 5770 states have (on average 1.415944540727903) internal successors, (8170), 5821 states have internal predecessors, (8170), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2021-12-06 17:20:43,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7430 states to 7430 states and 10915 transitions. [2021-12-06 17:20:43,606 INFO L78 Accepts]: Start accepts. Automaton has 7430 states and 10915 transitions. Word has length 163 [2021-12-06 17:20:43,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:43,607 INFO L470 AbstractCegarLoop]: Abstraction has 7430 states and 10915 transitions. [2021-12-06 17:20:43,607 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-06 17:20:43,607 INFO L276 IsEmpty]: Start isEmpty. Operand 7430 states and 10915 transitions. [2021-12-06 17:20:43,618 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2021-12-06 17:20:43,618 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:43,618 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:43,664 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-12-06 17:20:43,819 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:43,819 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:43,819 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:43,820 INFO L85 PathProgramCache]: Analyzing trace with hash 639220886, now seen corresponding path program 1 times [2021-12-06 17:20:43,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:43,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1963044677] [2021-12-06 17:20:43,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:43,821 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:43,821 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:43,822 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:43,823 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-06 17:20:45,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:45,791 INFO L263 TraceCheckSpWp]: Trace formula consists of 2331 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 17:20:45,796 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:46,295 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 17:20:46,295 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:46,295 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:46,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1963044677] [2021-12-06 17:20:46,295 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1963044677] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:46,295 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:46,295 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:20:46,295 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2103132947] [2021-12-06 17:20:46,296 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:46,296 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:20:46,296 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:46,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:20:46,297 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:20:46,297 INFO L87 Difference]: Start difference. First operand 7430 states and 10915 transitions. Second operand has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-06 17:20:49,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:49,576 INFO L93 Difference]: Finished difference Result 18921 states and 28318 transitions. [2021-12-06 17:20:49,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 17:20:49,578 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2021-12-06 17:20:49,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:49,612 INFO L225 Difference]: With dead ends: 18921 [2021-12-06 17:20:49,613 INFO L226 Difference]: Without dead ends: 11508 [2021-12-06 17:20:49,643 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:20:49,643 INFO L933 BasicCegarLoop]: 3534 mSDtfsCounter, 1085 mSDsluCounter, 12791 mSDsCounter, 0 mSdLazyCounter, 553 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1295 SdHoareTripleChecker+Valid, 16325 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 553 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:49,644 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1295 Valid, 16325 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 553 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2021-12-06 17:20:49,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11508 states. [2021-12-06 17:20:49,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11508 to 7430. [2021-12-06 17:20:49,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7430 states, 5770 states have (on average 1.4152512998266897) internal successors, (8166), 5821 states have internal predecessors, (8166), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2021-12-06 17:20:49,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7430 states to 7430 states and 10911 transitions. [2021-12-06 17:20:49,944 INFO L78 Accepts]: Start accepts. Automaton has 7430 states and 10911 transitions. Word has length 163 [2021-12-06 17:20:49,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:49,944 INFO L470 AbstractCegarLoop]: Abstraction has 7430 states and 10911 transitions. [2021-12-06 17:20:49,945 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2021-12-06 17:20:49,945 INFO L276 IsEmpty]: Start isEmpty. Operand 7430 states and 10911 transitions. [2021-12-06 17:20:49,955 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2021-12-06 17:20:49,955 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:49,955 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:50,001 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Ended with exit code 0 [2021-12-06 17:20:50,155 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:50,156 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:50,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:50,156 INFO L85 PathProgramCache]: Analyzing trace with hash -1694171752, now seen corresponding path program 1 times [2021-12-06 17:20:50,158 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:50,158 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [344200113] [2021-12-06 17:20:50,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:50,158 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:50,158 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:50,159 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:50,160 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-06 17:20:52,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:52,208 INFO L263 TraceCheckSpWp]: Trace formula consists of 2331 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 17:20:52,211 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:52,599 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-12-06 17:20:52,599 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:52,599 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:52,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [344200113] [2021-12-06 17:20:52,599 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [344200113] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:52,599 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:52,599 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 17:20:52,600 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1224061911] [2021-12-06 17:20:52,600 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:52,600 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 17:20:52,600 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:52,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 17:20:52,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:20:52,601 INFO L87 Difference]: Start difference. First operand 7430 states and 10911 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:20:52,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:52,825 INFO L93 Difference]: Finished difference Result 14923 states and 22009 transitions. [2021-12-06 17:20:52,825 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 17:20:52,825 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 163 [2021-12-06 17:20:52,826 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:52,848 INFO L225 Difference]: With dead ends: 14923 [2021-12-06 17:20:52,849 INFO L226 Difference]: Without dead ends: 7510 [2021-12-06 17:20:52,863 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:20:52,863 INFO L933 BasicCegarLoop]: 2269 mSDtfsCounter, 6 mSDsluCounter, 6801 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 9070 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:52,864 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7 Valid, 9070 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 17:20:52,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7510 states. [2021-12-06 17:20:53,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7510 to 7462. [2021-12-06 17:20:53,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7462 states, 5794 states have (on average 1.4135312392129789) internal successors, (8190), 5845 states have internal predecessors, (8190), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 300 states have return successors, (1442), 1371 states have call predecessors, (1442), 1366 states have call successors, (1442) [2021-12-06 17:20:53,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7462 states to 7462 states and 10999 transitions. [2021-12-06 17:20:53,124 INFO L78 Accepts]: Start accepts. Automaton has 7462 states and 10999 transitions. Word has length 163 [2021-12-06 17:20:53,125 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:53,125 INFO L470 AbstractCegarLoop]: Abstraction has 7462 states and 10999 transitions. [2021-12-06 17:20:53,125 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:20:53,125 INFO L276 IsEmpty]: Start isEmpty. Operand 7462 states and 10999 transitions. [2021-12-06 17:20:53,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 166 [2021-12-06 17:20:53,135 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:53,135 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:53,184 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-12-06 17:20:53,335 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:53,336 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:53,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:53,336 INFO L85 PathProgramCache]: Analyzing trace with hash -320678795, now seen corresponding path program 1 times [2021-12-06 17:20:53,338 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:53,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [353084059] [2021-12-06 17:20:53,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:53,338 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:53,338 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:53,339 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:53,339 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-06 17:20:55,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:55,425 INFO L263 TraceCheckSpWp]: Trace formula consists of 2334 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 17:20:55,428 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:20:55,861 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-12-06 17:20:55,861 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:20:55,861 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:20:55,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [353084059] [2021-12-06 17:20:55,861 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [353084059] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:20:55,861 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:20:55,862 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 17:20:55,862 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [464777156] [2021-12-06 17:20:55,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:20:55,862 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 17:20:55,862 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:20:55,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 17:20:55,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:20:55,863 INFO L87 Difference]: Start difference. First operand 7462 states and 10999 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:20:56,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:20:56,115 INFO L93 Difference]: Finished difference Result 14933 states and 22053 transitions. [2021-12-06 17:20:56,115 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 17:20:56,116 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 165 [2021-12-06 17:20:56,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:20:56,131 INFO L225 Difference]: With dead ends: 14933 [2021-12-06 17:20:56,131 INFO L226 Difference]: Without dead ends: 7488 [2021-12-06 17:20:56,143 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:20:56,144 INFO L933 BasicCegarLoop]: 2267 mSDtfsCounter, 2 mSDsluCounter, 6796 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9063 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:20:56,144 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9063 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:20:56,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7488 states. [2021-12-06 17:20:56,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7488 to 7482. [2021-12-06 17:20:56,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7482 states, 5808 states have (on average 1.412534435261708) internal successors, (8204), 5861 states have internal predecessors, (8204), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 306 states have return successors, (1456), 1375 states have call predecessors, (1456), 1366 states have call successors, (1456) [2021-12-06 17:20:56,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7482 states to 7482 states and 11027 transitions. [2021-12-06 17:20:56,361 INFO L78 Accepts]: Start accepts. Automaton has 7482 states and 11027 transitions. Word has length 165 [2021-12-06 17:20:56,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:20:56,361 INFO L470 AbstractCegarLoop]: Abstraction has 7482 states and 11027 transitions. [2021-12-06 17:20:56,361 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 17:20:56,361 INFO L276 IsEmpty]: Start isEmpty. Operand 7482 states and 11027 transitions. [2021-12-06 17:20:56,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-12-06 17:20:56,371 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:20:56,371 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:20:56,405 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Ended with exit code 0 [2021-12-06 17:20:56,571 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:20:56,572 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:20:56,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:20:56,574 INFO L85 PathProgramCache]: Analyzing trace with hash 1424768948, now seen corresponding path program 1 times [2021-12-06 17:20:56,579 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:20:56,580 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [475516950] [2021-12-06 17:20:56,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:20:56,580 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:20:56,581 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:20:56,583 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:20:56,585 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-06 17:20:58,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:20:58,679 INFO L263 TraceCheckSpWp]: Trace formula consists of 2360 conjuncts, 24 conjunts are in the unsatisfiable core [2021-12-06 17:20:58,682 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:21:00,119 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-12-06 17:21:00,120 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:21:00,120 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:21:00,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [475516950] [2021-12-06 17:21:00,120 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [475516950] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:21:00,120 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:21:00,120 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 17:21:00,120 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1799500729] [2021-12-06 17:21:00,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:21:00,121 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 17:21:00,121 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:21:00,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 17:21:00,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2021-12-06 17:21:00,122 INFO L87 Difference]: Start difference. First operand 7482 states and 11027 transitions. Second operand has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 17:21:02,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:21:02,133 INFO L93 Difference]: Finished difference Result 19059 states and 28694 transitions. [2021-12-06 17:21:02,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 17:21:02,138 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) Word has length 172 [2021-12-06 17:21:02,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:21:02,163 INFO L225 Difference]: With dead ends: 19059 [2021-12-06 17:21:02,164 INFO L226 Difference]: Without dead ends: 11594 [2021-12-06 17:21:02,179 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2021-12-06 17:21:02,180 INFO L933 BasicCegarLoop]: 3646 mSDtfsCounter, 1089 mSDsluCounter, 38790 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1299 SdHoareTripleChecker+Valid, 42436 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-06 17:21:02,180 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1299 Valid, 42436 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-06 17:21:02,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11594 states. [2021-12-06 17:21:02,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11594 to 7506. [2021-12-06 17:21:02,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7506 states, 5826 states have (on average 1.4105732921386887) internal successors, (8218), 5877 states have internal predecessors, (8218), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:21:02,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7506 states to 7506 states and 11063 transitions. [2021-12-06 17:21:02,496 INFO L78 Accepts]: Start accepts. Automaton has 7506 states and 11063 transitions. Word has length 172 [2021-12-06 17:21:02,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:21:02,496 INFO L470 AbstractCegarLoop]: Abstraction has 7506 states and 11063 transitions. [2021-12-06 17:21:02,497 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 17:21:02,497 INFO L276 IsEmpty]: Start isEmpty. Operand 7506 states and 11063 transitions. [2021-12-06 17:21:02,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2021-12-06 17:21:02,506 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:21:02,506 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:21:02,543 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Ended with exit code 0 [2021-12-06 17:21:02,706 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:21:02,708 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:21:02,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:21:02,709 INFO L85 PathProgramCache]: Analyzing trace with hash 1685717248, now seen corresponding path program 1 times [2021-12-06 17:21:02,715 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:21:02,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1670482815] [2021-12-06 17:21:02,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:21:02,716 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:21:02,716 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:21:02,718 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:21:02,721 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-06 17:21:05,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:21:05,170 INFO L263 TraceCheckSpWp]: Trace formula consists of 2385 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 17:21:05,173 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:21:05,395 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-12-06 17:21:05,395 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:21:05,396 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:21:05,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1670482815] [2021-12-06 17:21:05,396 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1670482815] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:21:05,396 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:21:05,396 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 17:21:05,396 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1814241256] [2021-12-06 17:21:05,396 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:21:05,397 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 17:21:05,397 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:21:05,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 17:21:05,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:21:05,397 INFO L87 Difference]: Start difference. First operand 7506 states and 11063 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 17:21:05,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:21:05,814 INFO L93 Difference]: Finished difference Result 19365 states and 29130 transitions. [2021-12-06 17:21:05,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 17:21:05,818 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 178 [2021-12-06 17:21:05,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:21:05,842 INFO L225 Difference]: With dead ends: 19365 [2021-12-06 17:21:05,842 INFO L226 Difference]: Without dead ends: 11876 [2021-12-06 17:21:05,853 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:21:05,854 INFO L933 BasicCegarLoop]: 3676 mSDtfsCounter, 1075 mSDsluCounter, 2454 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1282 SdHoareTripleChecker+Valid, 6130 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:21:05,854 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1282 Valid, 6130 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:21:05,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11876 states. [2021-12-06 17:21:06,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11876 to 7510. [2021-12-06 17:21:06,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7510 states, 5830 states have (on average 1.4102915951972557) internal successors, (8222), 5881 states have internal predecessors, (8222), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:21:06,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7510 states to 7510 states and 11067 transitions. [2021-12-06 17:21:06,149 INFO L78 Accepts]: Start accepts. Automaton has 7510 states and 11067 transitions. Word has length 178 [2021-12-06 17:21:06,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:21:06,150 INFO L470 AbstractCegarLoop]: Abstraction has 7510 states and 11067 transitions. [2021-12-06 17:21:06,150 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 17:21:06,150 INFO L276 IsEmpty]: Start isEmpty. Operand 7510 states and 11067 transitions. [2021-12-06 17:21:06,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2021-12-06 17:21:06,159 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:21:06,159 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:21:06,197 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Ended with exit code 0 [2021-12-06 17:21:06,360 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:21:06,361 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:21:06,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:21:06,362 INFO L85 PathProgramCache]: Analyzing trace with hash 711929151, now seen corresponding path program 1 times [2021-12-06 17:21:06,368 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:21:06,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1722094081] [2021-12-06 17:21:06,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:21:06,369 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:21:06,370 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:21:06,372 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:21:06,374 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-06 17:21:08,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:21:08,751 INFO L263 TraceCheckSpWp]: Trace formula consists of 2436 conjuncts, 14 conjunts are in the unsatisfiable core [2021-12-06 17:21:08,757 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:21:09,131 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2021-12-06 17:21:09,131 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:21:09,131 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:21:09,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1722094081] [2021-12-06 17:21:09,131 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1722094081] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:21:09,132 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:21:09,132 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:21:09,132 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1782705660] [2021-12-06 17:21:09,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:21:09,132 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:21:09,132 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:21:09,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:21:09,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:21:09,133 INFO L87 Difference]: Start difference. First operand 7510 states and 11067 transitions. Second operand has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-06 17:21:12,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:21:12,537 INFO L93 Difference]: Finished difference Result 19089 states and 28686 transitions. [2021-12-06 17:21:12,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 17:21:12,538 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2021-12-06 17:21:12,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:21:12,564 INFO L225 Difference]: With dead ends: 19089 [2021-12-06 17:21:12,564 INFO L226 Difference]: Without dead ends: 11596 [2021-12-06 17:21:12,575 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 177 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:21:12,576 INFO L933 BasicCegarLoop]: 3536 mSDtfsCounter, 1005 mSDsluCounter, 12898 mSDsCounter, 0 mSdLazyCounter, 555 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1194 SdHoareTripleChecker+Valid, 16434 SdHoareTripleChecker+Invalid, 555 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 555 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2021-12-06 17:21:12,576 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1194 Valid, 16434 Invalid, 555 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 555 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2021-12-06 17:21:12,585 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11596 states. [2021-12-06 17:21:12,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11596 to 7510. [2021-12-06 17:21:12,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7510 states, 5830 states have (on average 1.4096054888507719) internal successors, (8218), 5881 states have internal predecessors, (8218), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:21:12,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7510 states to 7510 states and 11063 transitions. [2021-12-06 17:21:12,919 INFO L78 Accepts]: Start accepts. Automaton has 7510 states and 11063 transitions. Word has length 182 [2021-12-06 17:21:12,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:21:12,920 INFO L470 AbstractCegarLoop]: Abstraction has 7510 states and 11063 transitions. [2021-12-06 17:21:12,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-06 17:21:12,920 INFO L276 IsEmpty]: Start isEmpty. Operand 7510 states and 11063 transitions. [2021-12-06 17:21:12,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2021-12-06 17:21:12,928 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:21:12,929 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:21:12,967 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-12-06 17:21:13,129 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:21:13,131 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:21:13,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:21:13,133 INFO L85 PathProgramCache]: Analyzing trace with hash 773968765, now seen corresponding path program 1 times [2021-12-06 17:21:13,138 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:21:13,138 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2137686396] [2021-12-06 17:21:13,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:21:13,138 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:21:13,138 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:21:13,139 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:21:13,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-06 17:21:16,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:21:16,245 INFO L263 TraceCheckSpWp]: Trace formula consists of 2436 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 17:21:16,248 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:21:16,772 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-12-06 17:21:16,772 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:21:16,772 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:21:16,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2137686396] [2021-12-06 17:21:16,772 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2137686396] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:21:16,772 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:21:16,772 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 17:21:16,773 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2047674622] [2021-12-06 17:21:16,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:21:16,773 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 17:21:16,773 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:21:16,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 17:21:16,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-06 17:21:16,774 INFO L87 Difference]: Start difference. First operand 7510 states and 11063 transitions. Second operand has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-06 17:21:19,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:21:19,145 INFO L93 Difference]: Finished difference Result 23455 states and 35691 transitions. [2021-12-06 17:21:19,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 17:21:19,147 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2021-12-06 17:21:19,147 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:21:19,185 INFO L225 Difference]: With dead ends: 23455 [2021-12-06 17:21:19,186 INFO L226 Difference]: Without dead ends: 15962 [2021-12-06 17:21:19,201 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-06 17:21:19,202 INFO L933 BasicCegarLoop]: 4849 mSDtfsCounter, 2087 mSDsluCounter, 6100 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2481 SdHoareTripleChecker+Valid, 10949 SdHoareTripleChecker+Invalid, 211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2021-12-06 17:21:19,202 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2481 Valid, 10949 Invalid, 211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2021-12-06 17:21:19,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15962 states. [2021-12-06 17:21:19,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15962 to 7518. [2021-12-06 17:21:19,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4090441932168551) internal successors, (8226), 5889 states have internal predecessors, (8226), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:21:19,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11071 transitions. [2021-12-06 17:21:19,678 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11071 transitions. Word has length 182 [2021-12-06 17:21:19,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:21:19,678 INFO L470 AbstractCegarLoop]: Abstraction has 7518 states and 11071 transitions. [2021-12-06 17:21:19,678 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-06 17:21:19,678 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11071 transitions. [2021-12-06 17:21:19,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2021-12-06 17:21:19,685 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:21:19,685 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:21:19,726 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Ended with exit code 0 [2021-12-06 17:21:19,886 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:21:19,887 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:21:19,888 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:21:19,889 INFO L85 PathProgramCache]: Analyzing trace with hash 1073399476, now seen corresponding path program 1 times [2021-12-06 17:21:19,894 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:21:19,895 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1448678341] [2021-12-06 17:21:19,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:21:19,895 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:21:19,896 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:21:19,897 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:21:19,900 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-06 17:21:22,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:21:22,226 INFO L263 TraceCheckSpWp]: Trace formula consists of 2428 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 17:21:22,229 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:21:22,533 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-12-06 17:21:22,533 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 17:21:22,533 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 17:21:22,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1448678341] [2021-12-06 17:21:22,533 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1448678341] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:21:22,533 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:21:22,534 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 17:21:22,534 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [623564845] [2021-12-06 17:21:22,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:21:22,534 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 17:21:22,534 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 17:21:22,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 17:21:22,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:21:22,535 INFO L87 Difference]: Start difference. First operand 7518 states and 11071 transitions. Second operand has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 17:21:23,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:21:23,217 INFO L93 Difference]: Finished difference Result 19121 states and 28714 transitions. [2021-12-06 17:21:23,218 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 17:21:23,218 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 183 [2021-12-06 17:21:23,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:21:23,242 INFO L225 Difference]: With dead ends: 19121 [2021-12-06 17:21:23,242 INFO L226 Difference]: Without dead ends: 11620 [2021-12-06 17:21:23,257 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:21:23,257 INFO L933 BasicCegarLoop]: 3651 mSDtfsCounter, 1070 mSDsluCounter, 9663 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1277 SdHoareTripleChecker+Valid, 13314 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 17:21:23,258 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1277 Valid, 13314 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 17:21:23,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11620 states. [2021-12-06 17:21:23,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11620 to 7518. [2021-12-06 17:21:23,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4083590270640631) internal successors, (8222), 5889 states have internal predecessors, (8222), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2021-12-06 17:21:23,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11067 transitions. [2021-12-06 17:21:23,595 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11067 transitions. Word has length 183 [2021-12-06 17:21:23,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:21:23,596 INFO L470 AbstractCegarLoop]: Abstraction has 7518 states and 11067 transitions. [2021-12-06 17:21:23,596 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 17:21:23,596 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11067 transitions. [2021-12-06 17:21:23,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-12-06 17:21:23,602 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:21:23,602 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:21:23,641 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Ended with exit code 0 [2021-12-06 17:21:23,803 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 17:21:23,805 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:21:23,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:21:23,806 INFO L85 PathProgramCache]: Analyzing trace with hash -1941599003, now seen corresponding path program 1 times [2021-12-06 17:21:23,812 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 17:21:23,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1698958859] [2021-12-06 17:21:23,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:21:23,827 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 17:21:23,827 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 17:21:23,828 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 17:21:23,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_17b959ef-fa86-4b66-8493-90fad6a4b944/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process