./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:05:35,559 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:05:35,561 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:05:35,590 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:05:35,591 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:05:35,592 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:05:35,594 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:05:35,596 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:05:35,598 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:05:35,599 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:05:35,600 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:05:35,601 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:05:35,602 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:05:35,603 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:05:35,604 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:05:35,606 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:05:35,607 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:05:35,608 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:05:35,610 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:05:35,612 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:05:35,614 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:05:35,615 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:05:35,616 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:05:35,617 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:05:35,620 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:05:35,621 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:05:35,621 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:05:35,622 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:05:35,623 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:05:35,624 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:05:35,624 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:05:35,625 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:05:35,626 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:05:35,626 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:05:35,627 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:05:35,627 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:05:35,628 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:05:35,628 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:05:35,628 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:05:35,629 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:05:35,629 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:05:35,630 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 23:05:35,650 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:05:35,651 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:05:35,651 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:05:35,651 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:05:35,652 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:05:35,652 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:05:35,653 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:05:35,653 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:05:35,653 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:05:35,653 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:05:35,654 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 23:05:35,654 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:05:35,654 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:05:35,654 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:05:35,654 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:05:35,655 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:05:35,655 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:05:35,655 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:05:35,655 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:05:35,655 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:05:35,655 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:05:35,656 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:05:35,656 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:05:35,656 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:05:35,656 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:05:35,656 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 23:05:35,656 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 23:05:35,657 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:05:35,657 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:05:35,657 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:05:35,657 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:05:35,657 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-12-06 23:05:35,851 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:05:35,866 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:05:35,868 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:05:35,869 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:05:35,869 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:05:35,870 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-06 23:05:35,910 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/2ab2cf13a/09204a29d1994c039c197907d9b5b6dc/FLAGd18daa413 [2021-12-06 23:05:36,577 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:05:36,577 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-06 23:05:36,620 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/2ab2cf13a/09204a29d1994c039c197907d9b5b6dc/FLAGd18daa413 [2021-12-06 23:05:36,970 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/2ab2cf13a/09204a29d1994c039c197907d9b5b6dc [2021-12-06 23:05:36,976 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:05:36,978 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:05:36,979 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:05:36,980 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:05:36,984 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:05:36,985 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:05:36" (1/1) ... [2021-12-06 23:05:36,987 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6dfaeb43 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:36, skipping insertion in model container [2021-12-06 23:05:36,987 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:05:36" (1/1) ... [2021-12-06 23:05:36,997 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:05:37,078 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:05:37,639 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-06 23:05:38,226 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:05:38,245 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:05:38,336 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-06 23:05:38,464 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:05:38,557 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:05:38,557 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38 WrapperNode [2021-12-06 23:05:38,557 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:05:38,558 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:05:38,558 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:05:38,558 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:05:38,564 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,618 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,739 INFO L137 Inliner]: procedures = 188, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4876 [2021-12-06 23:05:38,740 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:05:38,740 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:05:38,740 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:05:38,740 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:05:38,748 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,748 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,762 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,762 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,833 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,850 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,862 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,909 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:05:38,910 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:05:38,910 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:05:38,910 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:05:38,912 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (1/1) ... [2021-12-06 23:05:38,919 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:05:38,926 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:05:38,936 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:05:38,938 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:05:38,972 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2021-12-06 23:05:38,972 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2021-12-06 23:05:38,972 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-06 23:05:38,972 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-06 23:05:38,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-06 23:05:38,972 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2021-12-06 23:05:38,972 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2021-12-06 23:05:38,972 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2021-12-06 23:05:38,972 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:05:38,973 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2021-12-06 23:05:38,973 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2021-12-06 23:05:38,973 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 23:05:38,973 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 23:05:38,973 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2021-12-06 23:05:38,973 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2021-12-06 23:05:38,974 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:05:38,974 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-12-06 23:05:38,974 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-06 23:05:38,974 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-06 23:05:38,974 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:05:38,974 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-12-06 23:05:38,974 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-12-06 23:05:38,974 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-12-06 23:05:38,975 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-12-06 23:05:38,975 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:05:38,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2021-12-06 23:05:38,975 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:05:38,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:05:38,975 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:05:38,975 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-12-06 23:05:38,976 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-06 23:05:38,976 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2021-12-06 23:05:38,976 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2021-12-06 23:05:38,976 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2021-12-06 23:05:38,976 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2021-12-06 23:05:38,976 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2021-12-06 23:05:38,976 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2021-12-06 23:05:38,977 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-06 23:05:38,977 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2021-12-06 23:05:38,977 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-06 23:05:38,977 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-06 23:05:38,977 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-06 23:05:38,977 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2021-12-06 23:05:38,977 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-12-06 23:05:38,978 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2021-12-06 23:05:38,978 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2021-12-06 23:05:38,978 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2021-12-06 23:05:38,978 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 23:05:38,978 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 23:05:38,978 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2021-12-06 23:05:38,978 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2021-12-06 23:05:38,979 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:05:38,979 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:05:39,381 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:05:39,383 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:05:39,460 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:05:45,756 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:05:45,771 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:05:45,771 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 23:05:45,774 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:05:45 BoogieIcfgContainer [2021-12-06 23:05:45,774 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:05:45,775 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:05:45,775 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:05:45,778 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:05:45,778 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:05:36" (1/3) ... [2021-12-06 23:05:45,779 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@312e0282 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:05:45, skipping insertion in model container [2021-12-06 23:05:45,779 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:05:38" (2/3) ... [2021-12-06 23:05:45,779 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@312e0282 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:05:45, skipping insertion in model container [2021-12-06 23:05:45,780 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:05:45" (3/3) ... [2021-12-06 23:05:45,781 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-06 23:05:45,786 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:05:45,786 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:05:45,827 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:05:45,832 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:05:45,832 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:05:45,863 INFO L276 IsEmpty]: Start isEmpty. Operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2021-12-06 23:05:45,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 23:05:45,871 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:05:45,872 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:45,872 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:05:45,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:45,876 INFO L85 PathProgramCache]: Analyzing trace with hash -601957003, now seen corresponding path program 1 times [2021-12-06 23:05:45,882 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:45,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [679308834] [2021-12-06 23:05:45,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:45,883 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:46,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:46,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:05:46,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:46,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:05:46,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:46,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:05:46,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:46,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:05:46,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:46,303 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:05:46,303 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:46,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [679308834] [2021-12-06 23:05:46,304 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [679308834] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:46,304 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:46,304 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:05:46,305 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472804086] [2021-12-06 23:05:46,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:46,309 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 23:05:46,309 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:46,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:05:46,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:05:46,335 INFO L87 Difference]: Start difference. First operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 4 states, 4 states have (on average 7.0) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:05:48,463 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:05:52,732 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:05:54,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:05:54,169 INFO L93 Difference]: Finished difference Result 3230 states and 4862 transitions. [2021-12-06 23:05:54,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:05:54,171 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.0) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-06 23:05:54,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:05:54,194 INFO L225 Difference]: With dead ends: 3230 [2021-12-06 23:05:54,194 INFO L226 Difference]: Without dead ends: 2148 [2021-12-06 23:05:54,201 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:05:54,204 INFO L933 BasicCegarLoop]: 1812 mSDtfsCounter, 1720 mSDsluCounter, 2296 mSDsCounter, 0 mSdLazyCounter, 836 mSolverCounterSat, 421 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1840 SdHoareTripleChecker+Valid, 4108 SdHoareTripleChecker+Invalid, 1259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 421 IncrementalHoareTripleChecker+Valid, 836 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.6s IncrementalHoareTripleChecker+Time [2021-12-06 23:05:54,204 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1840 Valid, 4108 Invalid, 1259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [421 Valid, 836 Invalid, 2 Unknown, 0 Unchecked, 7.6s Time] [2021-12-06 23:05:54,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2148 states. [2021-12-06 23:05:54,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2148 to 2066. [2021-12-06 23:05:54,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2066 states, 1626 states have (on average 1.4317343173431734) internal successors, (2328), 1636 states have internal predecessors, (2328), 363 states have call successors, (363), 77 states have call predecessors, (363), 76 states have return successors, (362), 360 states have call predecessors, (362), 362 states have call successors, (362) [2021-12-06 23:05:54,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2066 states to 2066 states and 3053 transitions. [2021-12-06 23:05:54,353 INFO L78 Accepts]: Start accepts. Automaton has 2066 states and 3053 transitions. Word has length 46 [2021-12-06 23:05:54,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:05:54,353 INFO L470 AbstractCegarLoop]: Abstraction has 2066 states and 3053 transitions. [2021-12-06 23:05:54,354 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.0) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:05:54,354 INFO L276 IsEmpty]: Start isEmpty. Operand 2066 states and 3053 transitions. [2021-12-06 23:05:54,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 23:05:54,357 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:05:54,357 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:05:54,358 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 23:05:54,358 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:05:54,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:05:54,358 INFO L85 PathProgramCache]: Analyzing trace with hash -1981556391, now seen corresponding path program 1 times [2021-12-06 23:05:54,358 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:05:54,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [202661359] [2021-12-06 23:05:54,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:05:54,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:05:54,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:54,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:05:54,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:54,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:05:54,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:54,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:05:54,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:54,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:05:54,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:05:54,554 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:05:54,554 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:05:54,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [202661359] [2021-12-06 23:05:54,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [202661359] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:05:54,555 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:05:54,555 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:05:54,555 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1185773572] [2021-12-06 23:05:54,555 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:05:54,556 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:05:54,556 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:05:54,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:05:54,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:05:54,557 INFO L87 Difference]: Start difference. First operand 2066 states and 3053 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:05:56,656 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:05:59,689 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:02,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:02,777 INFO L93 Difference]: Finished difference Result 6335 states and 9421 transitions. [2021-12-06 23:06:02,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:06:02,778 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-06 23:06:02,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:06:02,798 INFO L225 Difference]: With dead ends: 6335 [2021-12-06 23:06:02,799 INFO L226 Difference]: Without dead ends: 4271 [2021-12-06 23:06:02,804 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:06:02,805 INFO L933 BasicCegarLoop]: 1885 mSDtfsCounter, 1770 mSDsluCounter, 5851 mSDsCounter, 0 mSdLazyCounter, 1240 mSolverCounterSat, 403 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1896 SdHoareTripleChecker+Valid, 7736 SdHoareTripleChecker+Invalid, 1645 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 403 IncrementalHoareTripleChecker+Valid, 1240 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:06:02,805 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1896 Valid, 7736 Invalid, 1645 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [403 Valid, 1240 Invalid, 2 Unknown, 0 Unchecked, 8.0s Time] [2021-12-06 23:06:02,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4271 states. [2021-12-06 23:06:02,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4271 to 4137. [2021-12-06 23:06:02,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4137 states, 3257 states have (on average 1.431992631255757) internal successors, (4664), 3279 states have internal predecessors, (4664), 721 states have call successors, (721), 153 states have call predecessors, (721), 158 states have return successors, (738), 720 states have call predecessors, (738), 720 states have call successors, (738) [2021-12-06 23:06:02,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4137 states to 4137 states and 6123 transitions. [2021-12-06 23:06:02,957 INFO L78 Accepts]: Start accepts. Automaton has 4137 states and 6123 transitions. Word has length 46 [2021-12-06 23:06:02,958 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:06:02,958 INFO L470 AbstractCegarLoop]: Abstraction has 4137 states and 6123 transitions. [2021-12-06 23:06:02,958 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:06:02,958 INFO L276 IsEmpty]: Start isEmpty. Operand 4137 states and 6123 transitions. [2021-12-06 23:06:02,970 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2021-12-06 23:06:02,970 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:06:02,971 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:02,971 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 23:06:02,971 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:06:02,972 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:02,972 INFO L85 PathProgramCache]: Analyzing trace with hash -642422905, now seen corresponding path program 1 times [2021-12-06 23:06:02,972 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:02,972 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1140658956] [2021-12-06 23:06:02,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:02,972 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:03,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:06:03,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:06:03,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:06:03,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:06:03,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:06:03,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-06 23:06:03,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-06 23:06:03,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:06:03,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:03,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:03,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:03,207 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-12-06 23:06:03,208 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:03,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1140658956] [2021-12-06 23:06:03,208 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1140658956] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:03,208 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:03,208 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:06:03,208 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60570762] [2021-12-06 23:06:03,208 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:03,208 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:06:03,209 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:03,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:06:03,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:06:03,209 INFO L87 Difference]: Start difference. First operand 4137 states and 6123 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 23:06:05,288 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:08,485 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:11,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:11,110 INFO L93 Difference]: Finished difference Result 6996 states and 10303 transitions. [2021-12-06 23:06:11,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:06:11,110 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 103 [2021-12-06 23:06:11,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:06:11,123 INFO L225 Difference]: With dead ends: 6996 [2021-12-06 23:06:11,123 INFO L226 Difference]: Without dead ends: 2871 [2021-12-06 23:06:11,131 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:06:11,131 INFO L933 BasicCegarLoop]: 1536 mSDtfsCounter, 768 mSDsluCounter, 2103 mSDsCounter, 0 mSdLazyCounter, 777 mSolverCounterSat, 458 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 804 SdHoareTripleChecker+Valid, 3639 SdHoareTripleChecker+Invalid, 1237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 458 IncrementalHoareTripleChecker+Valid, 777 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.8s IncrementalHoareTripleChecker+Time [2021-12-06 23:06:11,132 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [804 Valid, 3639 Invalid, 1237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [458 Valid, 777 Invalid, 2 Unknown, 0 Unchecked, 7.8s Time] [2021-12-06 23:06:11,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2871 states. [2021-12-06 23:06:11,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2871 to 2756. [2021-12-06 23:06:11,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2756 states, 2189 states have (on average 1.423937871174052) internal successors, (3117), 2202 states have internal predecessors, (3117), 446 states have call successors, (446), 118 states have call predecessors, (446), 120 states have return successors, (456), 443 states have call predecessors, (456), 445 states have call successors, (456) [2021-12-06 23:06:11,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2756 states to 2756 states and 4019 transitions. [2021-12-06 23:06:11,216 INFO L78 Accepts]: Start accepts. Automaton has 2756 states and 4019 transitions. Word has length 103 [2021-12-06 23:06:11,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:06:11,216 INFO L470 AbstractCegarLoop]: Abstraction has 2756 states and 4019 transitions. [2021-12-06 23:06:11,217 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 23:06:11,217 INFO L276 IsEmpty]: Start isEmpty. Operand 2756 states and 4019 transitions. [2021-12-06 23:06:11,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2021-12-06 23:06:11,222 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:06:11,222 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:11,222 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 23:06:11,223 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:06:11,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:11,223 INFO L85 PathProgramCache]: Analyzing trace with hash 96929181, now seen corresponding path program 1 times [2021-12-06 23:06:11,223 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:11,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739822263] [2021-12-06 23:06:11,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:11,223 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:11,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:06:11,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:06:11,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:06:11,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:06:11,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:06:11,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 23:06:11,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-06 23:06:11,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:06:11,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 23:06:11,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 23:06:11,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 23:06:11,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 23:06:11,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:11,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:11,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:11,747 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-06 23:06:11,747 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:11,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739822263] [2021-12-06 23:06:11,747 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739822263] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:11,747 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:11,748 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 23:06:11,748 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347499523] [2021-12-06 23:06:11,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:11,749 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 23:06:11,749 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:11,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 23:06:11,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:06:11,750 INFO L87 Difference]: Start difference. First operand 2756 states and 4019 transitions. Second operand has 7 states, 7 states have (on average 13.0) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 4 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-06 23:06:13,869 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:18,492 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.71s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:19,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:19,048 INFO L93 Difference]: Finished difference Result 5380 states and 7886 transitions. [2021-12-06 23:06:19,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:06:19,048 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 13.0) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 4 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2021-12-06 23:06:19,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:06:19,061 INFO L225 Difference]: With dead ends: 5380 [2021-12-06 23:06:19,061 INFO L226 Difference]: Without dead ends: 2846 [2021-12-06 23:06:19,072 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2021-12-06 23:06:19,073 INFO L933 BasicCegarLoop]: 1500 mSDtfsCounter, 313 mSDsluCounter, 4921 mSDsCounter, 0 mSdLazyCounter, 1049 mSolverCounterSat, 384 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 6421 SdHoareTripleChecker+Invalid, 1434 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 384 IncrementalHoareTripleChecker+Valid, 1049 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:06:19,073 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [323 Valid, 6421 Invalid, 1434 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [384 Valid, 1049 Invalid, 1 Unknown, 0 Unchecked, 7.1s Time] [2021-12-06 23:06:19,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2846 states. [2021-12-06 23:06:19,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2846 to 2756. [2021-12-06 23:06:19,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2756 states, 2187 states have (on average 1.4224965706447188) internal successors, (3111), 2201 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 122 states have return successors, (462), 444 states have call predecessors, (462), 445 states have call successors, (462) [2021-12-06 23:06:19,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2756 states to 2756 states and 4019 transitions. [2021-12-06 23:06:19,170 INFO L78 Accepts]: Start accepts. Automaton has 2756 states and 4019 transitions. Word has length 144 [2021-12-06 23:06:19,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:06:19,171 INFO L470 AbstractCegarLoop]: Abstraction has 2756 states and 4019 transitions. [2021-12-06 23:06:19,171 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 13.0) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 4 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-06 23:06:19,171 INFO L276 IsEmpty]: Start isEmpty. Operand 2756 states and 4019 transitions. [2021-12-06 23:06:19,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-12-06 23:06:19,176 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:06:19,176 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:19,176 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 23:06:19,177 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:06:19,177 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:19,177 INFO L85 PathProgramCache]: Analyzing trace with hash 36910958, now seen corresponding path program 1 times [2021-12-06 23:06:19,177 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:19,177 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1966743956] [2021-12-06 23:06:19,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:19,177 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:20,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:06:20,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:06:20,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:06:20,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:06:20,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:06:20,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 23:06:20,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-06 23:06:20,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:06:20,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 23:06:20,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 23:06:20,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 23:06:20,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:20,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 23:06:20,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:21,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:21,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:21,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:21,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:21,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 23:06:21,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:21,350 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-06 23:06:21,351 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:21,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1966743956] [2021-12-06 23:06:21,351 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1966743956] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:21,351 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:21,351 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2021-12-06 23:06:21,351 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1981396946] [2021-12-06 23:06:21,351 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:21,352 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2021-12-06 23:06:21,352 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:21,352 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-12-06 23:06:21,353 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=239, Unknown=0, NotChecked=0, Total=272 [2021-12-06 23:06:21,353 INFO L87 Difference]: Start difference. First operand 2756 states and 4019 transitions. Second operand has 17 states, 16 states have (on average 6.0) internal successors, (96), 11 states have internal predecessors, (96), 3 states have call successors, (16), 4 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-06 23:06:23,698 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:25,739 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:34,520 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:41,852 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:42,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:42,417 INFO L93 Difference]: Finished difference Result 6799 states and 10167 transitions. [2021-12-06 23:06:42,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-12-06 23:06:42,418 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 6.0) internal successors, (96), 11 states have internal predecessors, (96), 3 states have call successors, (16), 4 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) Word has length 151 [2021-12-06 23:06:42,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:06:42,437 INFO L225 Difference]: With dead ends: 6799 [2021-12-06 23:06:42,437 INFO L226 Difference]: Without dead ends: 4265 [2021-12-06 23:06:42,442 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=67, Invalid=439, Unknown=0, NotChecked=0, Total=506 [2021-12-06 23:06:42,442 INFO L933 BasicCegarLoop]: 2374 mSDtfsCounter, 839 mSDsluCounter, 30958 mSDsCounter, 0 mSdLazyCounter, 4085 mSolverCounterSat, 201 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 976 SdHoareTripleChecker+Valid, 33332 SdHoareTripleChecker+Invalid, 4290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 201 IncrementalHoareTripleChecker+Valid, 4085 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.7s IncrementalHoareTripleChecker+Time [2021-12-06 23:06:42,443 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [976 Valid, 33332 Invalid, 4290 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [201 Valid, 4085 Invalid, 4 Unknown, 0 Unchecked, 20.7s Time] [2021-12-06 23:06:42,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4265 states. [2021-12-06 23:06:42,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4265 to 2763. [2021-12-06 23:06:42,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4204286365709073) internal successors, (3115), 2205 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:06:42,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4025 transitions. [2021-12-06 23:06:42,555 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4025 transitions. Word has length 151 [2021-12-06 23:06:42,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:06:42,556 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4025 transitions. [2021-12-06 23:06:42,556 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 6.0) internal successors, (96), 11 states have internal predecessors, (96), 3 states have call successors, (16), 4 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-06 23:06:42,556 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4025 transitions. [2021-12-06 23:06:42,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-06 23:06:42,562 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:06:42,562 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:42,562 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 23:06:42,563 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:06:42,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:42,563 INFO L85 PathProgramCache]: Analyzing trace with hash 1511771000, now seen corresponding path program 1 times [2021-12-06 23:06:42,563 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:42,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [358635638] [2021-12-06 23:06:42,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:42,563 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:42,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:06:42,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:06:42,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:06:42,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:06:42,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:06:42,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 23:06:42,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-06 23:06:42,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:06:42,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 23:06:42,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 23:06:42,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 23:06:42,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-12-06 23:06:42,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 23:06:42,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-06 23:06:42,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-06 23:06:42,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-12-06 23:06:42,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:42,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:42,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 23:06:42,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:42,951 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 165 trivial. 0 not checked. [2021-12-06 23:06:42,951 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:42,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [358635638] [2021-12-06 23:06:42,952 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [358635638] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:42,952 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:42,952 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:06:42,952 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1403155924] [2021-12-06 23:06:42,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:42,953 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:06:42,953 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:42,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:06:42,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:06:42,954 INFO L87 Difference]: Start difference. First operand 2763 states and 4025 transitions. Second operand has 6 states, 6 states have (on average 20.0) internal successors, (120), 4 states have internal predecessors, (120), 2 states have call successors, (20), 4 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 23:06:45,070 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:52,437 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:55,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:06:55,101 INFO L93 Difference]: Finished difference Result 8015 states and 12105 transitions. [2021-12-06 23:06:55,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:06:55,101 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 20.0) internal successors, (120), 4 states have internal predecessors, (120), 2 states have call successors, (20), 4 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 190 [2021-12-06 23:06:55,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:06:55,126 INFO L225 Difference]: With dead ends: 8015 [2021-12-06 23:06:55,126 INFO L226 Difference]: Without dead ends: 5474 [2021-12-06 23:06:55,130 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:06:55,131 INFO L933 BasicCegarLoop]: 2471 mSDtfsCounter, 1931 mSDsluCounter, 6265 mSDsCounter, 0 mSdLazyCounter, 2071 mSolverCounterSat, 406 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2065 SdHoareTripleChecker+Valid, 8736 SdHoareTripleChecker+Invalid, 2479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 406 IncrementalHoareTripleChecker+Valid, 2071 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.9s IncrementalHoareTripleChecker+Time [2021-12-06 23:06:55,131 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2065 Valid, 8736 Invalid, 2479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [406 Valid, 2071 Invalid, 2 Unknown, 0 Unchecked, 11.9s Time] [2021-12-06 23:06:55,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5474 states. [2021-12-06 23:06:55,233 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5474 to 2767. [2021-12-06 23:06:55,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2767 states, 2197 states have (on average 1.4196631770596269) internal successors, (3119), 2209 states have internal predecessors, (3119), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:06:55,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2767 states to 2767 states and 4029 transitions. [2021-12-06 23:06:55,244 INFO L78 Accepts]: Start accepts. Automaton has 2767 states and 4029 transitions. Word has length 190 [2021-12-06 23:06:55,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:06:55,244 INFO L470 AbstractCegarLoop]: Abstraction has 2767 states and 4029 transitions. [2021-12-06 23:06:55,244 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 20.0) internal successors, (120), 4 states have internal predecessors, (120), 2 states have call successors, (20), 4 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 23:06:55,244 INFO L276 IsEmpty]: Start isEmpty. Operand 2767 states and 4029 transitions. [2021-12-06 23:06:55,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-06 23:06:55,251 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:06:55,251 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:06:55,251 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 23:06:55,251 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:06:55,251 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:06:55,252 INFO L85 PathProgramCache]: Analyzing trace with hash 1309859301, now seen corresponding path program 1 times [2021-12-06 23:06:55,252 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:06:55,252 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1532501311] [2021-12-06 23:06:55,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:06:55,252 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:06:55,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:06:55,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:06:55,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:06:55,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:06:55,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:06:55,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 23:06:55,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-06 23:06:55,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:06:55,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 23:06:55,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 23:06:55,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 23:06:55,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-12-06 23:06:55,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 23:06:55,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-06 23:06:55,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-06 23:06:55,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-06 23:06:55,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-06 23:06:55,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:55,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:06:55,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 23:06:55,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:06:55,629 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 177 trivial. 0 not checked. [2021-12-06 23:06:55,629 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:06:55,629 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1532501311] [2021-12-06 23:06:55,629 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1532501311] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:06:55,629 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:06:55,629 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:06:55,629 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606353245] [2021-12-06 23:06:55,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:06:55,630 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:06:55,630 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:06:55,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:06:55,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:06:55,630 INFO L87 Difference]: Start difference. First operand 2767 states and 4029 transitions. Second operand has 5 states, 5 states have (on average 25.2) internal successors, (126), 3 states have internal predecessors, (126), 2 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 23:06:57,743 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:06:59,784 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:07:05,851 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.24s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:07:07,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:07:07,391 INFO L93 Difference]: Finished difference Result 5397 states and 7888 transitions. [2021-12-06 23:07:07,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:07:07,391 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 25.2) internal successors, (126), 3 states have internal predecessors, (126), 2 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2021-12-06 23:07:07,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:07:07,403 INFO L225 Difference]: With dead ends: 5397 [2021-12-06 23:07:07,404 INFO L226 Difference]: Without dead ends: 2852 [2021-12-06 23:07:07,408 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:07:07,409 INFO L933 BasicCegarLoop]: 1501 mSDtfsCounter, 156 mSDsluCounter, 2785 mSDsCounter, 0 mSdLazyCounter, 1295 mSolverCounterSat, 191 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 4286 SdHoareTripleChecker+Invalid, 1488 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 191 IncrementalHoareTripleChecker+Valid, 1295 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.7s IncrementalHoareTripleChecker+Time [2021-12-06 23:07:07,409 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 4286 Invalid, 1488 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [191 Valid, 1295 Invalid, 2 Unknown, 0 Unchecked, 11.7s Time] [2021-12-06 23:07:07,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2852 states. [2021-12-06 23:07:07,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2852 to 2769. [2021-12-06 23:07:07,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.419281491587085) internal successors, (3121), 2211 states have internal predecessors, (3121), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:07:07,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4031 transitions. [2021-12-06 23:07:07,491 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4031 transitions. Word has length 200 [2021-12-06 23:07:07,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:07:07,492 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4031 transitions. [2021-12-06 23:07:07,492 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 25.2) internal successors, (126), 3 states have internal predecessors, (126), 2 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 23:07:07,492 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4031 transitions. [2021-12-06 23:07:07,499 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-06 23:07:07,499 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:07:07,499 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:07:07,499 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 23:07:07,499 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:07:07,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:07:07,500 INFO L85 PathProgramCache]: Analyzing trace with hash -1768954269, now seen corresponding path program 1 times [2021-12-06 23:07:07,500 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:07:07,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [714056531] [2021-12-06 23:07:07,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:07:07,500 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:07:48,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:48,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:07:48,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:48,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:07:48,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:48,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:07:48,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:48,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:07:48,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:48,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:07:48,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 23:07:49,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-06 23:07:49,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:07:49,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 23:07:49,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 23:07:49,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 23:07:49,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-12-06 23:07:49,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 23:07:49,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-06 23:07:49,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-06 23:07:49,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-06 23:07:49,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-06 23:07:49,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:07:49,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:07:49,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 23:07:49,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:07:49,521 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2021-12-06 23:07:49,522 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:07:49,522 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [714056531] [2021-12-06 23:07:49,522 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [714056531] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:07:49,522 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:07:49,522 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2021-12-06 23:07:49,522 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1805556079] [2021-12-06 23:07:49,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:07:49,523 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2021-12-06 23:07:49,523 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:07:49,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-12-06 23:07:49,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=239, Unknown=0, NotChecked=0, Total=272 [2021-12-06 23:07:49,523 INFO L87 Difference]: Start difference. First operand 2769 states and 4031 transitions. Second operand has 17 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 3 states have call successors, (21), 4 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 23:07:51,777 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:07:58,438 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.88s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:08:01,352 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:08:03,659 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:08:03,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:08:03,863 INFO L93 Difference]: Finished difference Result 6976 states and 10413 transitions. [2021-12-06 23:08:03,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:08:03,863 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 3 states have call successors, (21), 4 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2021-12-06 23:08:03,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:08:03,883 INFO L225 Difference]: With dead ends: 6976 [2021-12-06 23:08:03,884 INFO L226 Difference]: Without dead ends: 4429 [2021-12-06 23:08:03,890 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-12-06 23:08:03,891 INFO L933 BasicCegarLoop]: 2418 mSDtfsCounter, 1085 mSDsluCounter, 30392 mSDsCounter, 0 mSdLazyCounter, 3238 mSolverCounterSat, 409 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1234 SdHoareTripleChecker+Valid, 32810 SdHoareTripleChecker+Invalid, 3649 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 409 IncrementalHoareTripleChecker+Valid, 3238 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:08:03,891 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1234 Valid, 32810 Invalid, 3649 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [409 Valid, 3238 Invalid, 2 Unknown, 0 Unchecked, 14.0s Time] [2021-12-06 23:08:03,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4429 states. [2021-12-06 23:08:03,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4429 to 2773. [2021-12-06 23:08:03,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2773 states, 2203 states have (on average 1.4185201997276442) internal successors, (3125), 2213 states have internal predecessors, (3125), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 449 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:08:03,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2773 states to 2773 states and 4035 transitions. [2021-12-06 23:08:03,999 INFO L78 Accepts]: Start accepts. Automaton has 2773 states and 4035 transitions. Word has length 200 [2021-12-06 23:08:03,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:08:03,999 INFO L470 AbstractCegarLoop]: Abstraction has 2773 states and 4035 transitions. [2021-12-06 23:08:04,000 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 3 states have call successors, (21), 4 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 23:08:04,000 INFO L276 IsEmpty]: Start isEmpty. Operand 2773 states and 4035 transitions. [2021-12-06 23:08:04,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 203 [2021-12-06 23:08:04,006 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:08:04,006 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:08:04,007 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 23:08:04,007 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:08:04,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:08:04,007 INFO L85 PathProgramCache]: Analyzing trace with hash -1821148220, now seen corresponding path program 1 times [2021-12-06 23:08:04,007 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:08:04,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208570741] [2021-12-06 23:08:04,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:08:04,007 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:08:04,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:08:04,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:08:04,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:08:04,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 23:08:04,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:08:04,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 23:08:04,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-06 23:08:04,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:08:04,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 23:08:04,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 23:08:04,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 23:08:04,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 23:08:04,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:08:04,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:08:04,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 23:08:04,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-06 23:08:04,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 137 [2021-12-06 23:08:04,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-06 23:08:04,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:08:04,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:08:04,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-06 23:08:04,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:08:04,390 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-12-06 23:08:04,390 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:08:04,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208570741] [2021-12-06 23:08:04,390 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [208570741] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:08:04,391 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:08:04,391 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-06 23:08:04,391 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [474611666] [2021-12-06 23:08:04,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:08:04,391 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-06 23:08:04,391 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:08:04,392 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-06 23:08:04,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-06 23:08:04,392 INFO L87 Difference]: Start difference. First operand 2773 states and 4035 transitions. Second operand has 10 states, 10 states have (on average 13.4) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 7 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 23:08:06,520 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:08:14,821 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:08:19,709 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:08:24,723 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:08:25,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:08:25,057 INFO L93 Difference]: Finished difference Result 6692 states and 9962 transitions. [2021-12-06 23:08:25,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 23:08:25,058 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 13.4) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 7 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) Word has length 202 [2021-12-06 23:08:25,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:08:25,069 INFO L225 Difference]: With dead ends: 6692 [2021-12-06 23:08:25,069 INFO L226 Difference]: Without dead ends: 4141 [2021-12-06 23:08:25,074 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2021-12-06 23:08:25,075 INFO L933 BasicCegarLoop]: 2248 mSDtfsCounter, 777 mSDsluCounter, 10652 mSDsCounter, 0 mSdLazyCounter, 3264 mSolverCounterSat, 213 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 903 SdHoareTripleChecker+Valid, 12900 SdHoareTripleChecker+Invalid, 3480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 213 IncrementalHoareTripleChecker+Valid, 3264 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.5s IncrementalHoareTripleChecker+Time [2021-12-06 23:08:25,075 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [903 Valid, 12900 Invalid, 3480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [213 Valid, 3264 Invalid, 3 Unknown, 0 Unchecked, 20.5s Time] [2021-12-06 23:08:25,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4141 states. [2021-12-06 23:08:25,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4141 to 2781. [2021-12-06 23:08:25,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2781 states, 2209 states have (on average 1.4173834314169307) internal successors, (3131), 2219 states have internal predecessors, (3131), 446 states have call successors, (446), 118 states have call predecessors, (446), 125 states have return successors, (468), 451 states have call predecessors, (468), 445 states have call successors, (468) [2021-12-06 23:08:25,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2781 states to 2781 states and 4045 transitions. [2021-12-06 23:08:25,169 INFO L78 Accepts]: Start accepts. Automaton has 2781 states and 4045 transitions. Word has length 202 [2021-12-06 23:08:25,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:08:25,169 INFO L470 AbstractCegarLoop]: Abstraction has 2781 states and 4045 transitions. [2021-12-06 23:08:25,169 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 13.4) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 7 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 23:08:25,169 INFO L276 IsEmpty]: Start isEmpty. Operand 2781 states and 4045 transitions. [2021-12-06 23:08:25,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 227 [2021-12-06 23:08:25,176 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:08:25,176 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:08:25,176 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 23:08:25,176 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:08:25,176 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:08:25,176 INFO L85 PathProgramCache]: Analyzing trace with hash 1917943735, now seen corresponding path program 1 times [2021-12-06 23:08:25,177 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:08:25,177 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1232041878] [2021-12-06 23:08:25,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:08:25,177 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:08:28,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:08:28,067 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:08:29,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:08:29,893 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:08:29,893 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 23:08:29,894 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:08:29,895 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 23:08:29,897 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:08:29,899 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:08:29,959 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,960 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,960 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,960 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,961 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,961 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,961 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,962 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,962 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:29,962 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-06 23:08:30,136 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:08:30 BoogieIcfgContainer [2021-12-06 23:08:30,137 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:08:30,137 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:08:30,137 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:08:30,137 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:08:30,137 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:05:45" (3/4) ... [2021-12-06 23:08:30,139 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 23:08:30,139 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:08:30,140 INFO L158 Benchmark]: Toolchain (without parser) took 173162.47ms. Allocated memory was 104.9MB in the beginning and 671.1MB in the end (delta: 566.2MB). Free memory was 76.7MB in the beginning and 234.6MB in the end (delta: -157.9MB). Peak memory consumption was 410.4MB. Max. memory is 16.1GB. [2021-12-06 23:08:30,140 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 104.9MB. Free memory is still 84.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:08:30,140 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1578.36ms. Allocated memory was 104.9MB in the beginning and 148.9MB in the end (delta: 44.0MB). Free memory was 76.7MB in the beginning and 46.0MB in the end (delta: 30.7MB). Peak memory consumption was 89.1MB. Max. memory is 16.1GB. [2021-12-06 23:08:30,141 INFO L158 Benchmark]: Boogie Procedure Inliner took 181.48ms. Allocated memory was 148.9MB in the beginning and 186.6MB in the end (delta: 37.7MB). Free memory was 46.0MB in the beginning and 95.0MB in the end (delta: -49.0MB). Peak memory consumption was 7.0MB. Max. memory is 16.1GB. [2021-12-06 23:08:30,141 INFO L158 Benchmark]: Boogie Preprocessor took 169.46ms. Allocated memory is still 186.6MB. Free memory was 93.9MB in the beginning and 100.4MB in the end (delta: -6.4MB). Peak memory consumption was 46.2MB. Max. memory is 16.1GB. [2021-12-06 23:08:30,141 INFO L158 Benchmark]: RCFGBuilder took 6863.73ms. Allocated memory was 186.6MB in the beginning and 270.5MB in the end (delta: 83.9MB). Free memory was 100.4MB in the beginning and 138.1MB in the end (delta: -37.7MB). Peak memory consumption was 134.7MB. Max. memory is 16.1GB. [2021-12-06 23:08:30,142 INFO L158 Benchmark]: TraceAbstraction took 164361.49ms. Allocated memory was 270.5MB in the beginning and 671.1MB in the end (delta: 400.6MB). Free memory was 137.0MB in the beginning and 234.6MB in the end (delta: -97.6MB). Peak memory consumption was 449.2MB. Max. memory is 16.1GB. [2021-12-06 23:08:30,142 INFO L158 Benchmark]: Witness Printer took 2.62ms. Allocated memory is still 671.1MB. Free memory is still 234.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:08:30,143 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 104.9MB. Free memory is still 84.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1578.36ms. Allocated memory was 104.9MB in the beginning and 148.9MB in the end (delta: 44.0MB). Free memory was 76.7MB in the beginning and 46.0MB in the end (delta: 30.7MB). Peak memory consumption was 89.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 181.48ms. Allocated memory was 148.9MB in the beginning and 186.6MB in the end (delta: 37.7MB). Free memory was 46.0MB in the beginning and 95.0MB in the end (delta: -49.0MB). Peak memory consumption was 7.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 169.46ms. Allocated memory is still 186.6MB. Free memory was 93.9MB in the beginning and 100.4MB in the end (delta: -6.4MB). Peak memory consumption was 46.2MB. Max. memory is 16.1GB. * RCFGBuilder took 6863.73ms. Allocated memory was 186.6MB in the beginning and 270.5MB in the end (delta: 83.9MB). Free memory was 100.4MB in the beginning and 138.1MB in the end (delta: -37.7MB). Peak memory consumption was 134.7MB. Max. memory is 16.1GB. * TraceAbstraction took 164361.49ms. Allocated memory was 270.5MB in the beginning and 671.1MB in the end (delta: 400.6MB). Free memory was 137.0MB in the beginning and 234.6MB in the end (delta: -97.6MB). Peak memory consumption was 449.2MB. Max. memory is 16.1GB. * Witness Printer took 2.62ms. Allocated memory is still 671.1MB. Free memory is still 234.6MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7417]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 7550, overapproximation of bitwiseOr at line 9385, overapproximation of bitwiseAnd at line 9183. Possible FailurePath: [L7440] int ldv_state_variable_3 ; [L7441] int LDV_IN_INTERRUPT = 1; [L7442] int ldv_state_variable_2 ; [L7443] struct sdio_func *mwifiex_sdio_group0 ; [L7444] int ref_cnt ; [L7445] struct mwifiex_adapter *sdio_ops_group0 ; [L7446] int ldv_state_variable_1 ; [L7447] struct device *mwifiex_sdio_pm_ops_group1 ; [L7448] int ldv_state_variable_4 ; [L7449] int ldv_state_variable_0 ; [L7450] struct sk_buff *sdio_ops_group1 ; [L7543-L7545] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd87xx = {1U, 1U, 64U, 65U, 48U, 3U, 96U, 97U, 63U, 65534U, 64U, 4U, 5U, (unsigned char)0, (unsigned char)0, 6U, 7U, (unsigned char)0, (unsigned char)0, 8U, 9U, 108U}; [L7546-L7548] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd8897 = {0U, 0U, 96U, 97U, 80U, 195U, 192U, 193U, 255U, 4294967295U, 184U, 4U, 5U, 6U, 7U, 8U, 9U, 10U, 11U, 12U, 13U, 204U}; [L7549-L7551] static struct mwifiex_sdio_device const mwifiex_sdio_sd8786 = {"mrvl/sd8786_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7552-L7554] static struct mwifiex_sdio_device const mwifiex_sdio_sd8787 = {"mrvl/sd8787_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7555-L7557] static struct mwifiex_sdio_device const mwifiex_sdio_sd8797 = {"mrvl/sd8797_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7558-L7560] static struct mwifiex_sdio_device const mwifiex_sdio_sd8897 = {"mrvl/sd8897_uapsta.bin", & mwifiex_reg_sd8897, 32U, 16U, 1, 0, 4096U, 32768U, 32768U}; [L7646] static u8 user_rmmod ; [L7648] static struct semaphore add_remove_card_sem ; [L7879-L7882] static struct sdio_device_id const mwifiex_ids[5U] = { {255U, 735U, 37142U, (unsigned long )(& mwifiex_sdio_sd8786)}, {255U, 735U, 37145U, (unsigned long )(& mwifiex_sdio_sd8787)}, {255U, 735U, 37161U, (unsigned long )(& mwifiex_sdio_sd8797)}, {255U, 735U, 37165U, (unsigned long )(& mwifiex_sdio_sd8897)}}; [L7883] struct sdio_device_id const __mod_sdio__mwifiex_ids_device_table ; [L7884-L7886] static struct dev_pm_ops const mwifiex_sdio_pm_ops = {0, 0, & mwifiex_sdio_suspend, & mwifiex_sdio_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7887-L7889] static struct sdio_driver mwifiex_sdio = {(char *)"mwifiex_sdio", (struct sdio_device_id const *)(& mwifiex_ids), & mwifiex_sdio_probe, & mwifiex_sdio_remove, {0, 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_sdio_pm_ops, 0}}; [L9929] static struct mmc_host *reset_host ; [L9954-L9955] static struct work_struct card_reset_work = {{137438953424L}, {& card_reset_work.entry, & card_reset_work.entry}, & sdio_card_reset_worker, {(struct lock_class_key *)(& card_reset_work), {0, 0}, "card_reset_work", 0, 0UL}}; [L9966-L9972] static struct mwifiex_if_ops sdio_ops = {& mwifiex_init_sdio, & mwifiex_cleanup_sdio, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_sdio_enable_host_int, & mwifiex_sdio_disable_host_int, & mwifiex_process_int_status, & mwifiex_sdio_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, & mwifiex_update_mp_end_port, & mwifiex_cleanup_mpa_buf, & mwifiex_sdio_cmdrsp_complete, & mwifiex_sdio_cmdrsp_complete, 0, 0, 0, & mwifiex_sdio_card_reset, 0, 0}; [L9999] int ldv_retval_2 ; [L10000] int ldv_retval_5 ; [L10001] int ldv_retval_0 ; [L10002] int ldv_retval_6 ; [L10003] int ldv_retval_1 ; [L10010] int ldv_retval_4 ; [L10012] int ldv_retval_8 ; [L10013] int ldv_retval_3 ; [L10014] int ldv_retval_7 ; [L10462] Element set_impl[15] ; [L10463] int last_index = 0; [L10597] Set LDV_SKBS ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10047] u32 ldvarg1 ; [L10048] u32 tmp ; [L10049] u16 ldvarg4 ; [L10050] u16 tmp___0 ; [L10051] u8 ldvarg3 ; [L10052] u8 tmp___1 ; [L10053] struct mwifiex_fw_image *ldvarg0 ; [L10054] void *tmp___2 ; [L10055] struct mwifiex_tx_param *ldvarg2 ; [L10056] void *tmp___3 ; [L10057] struct sdio_device_id *ldvarg5 ; [L10058] void *tmp___4 ; [L10059] struct work_struct *ldvarg6 ; [L10060] void *tmp___5 ; [L10061] int tmp___6 ; [L10062] int tmp___7 ; [L10063] int tmp___8 ; [L10064] int tmp___9 ; [L10065] int tmp___10 ; [L10066] int tmp___11 ; [L10068] tmp = __VERIFIER_nondet_u32() [L10069] ldvarg1 = tmp [L10070] tmp___0 = __VERIFIER_nondet_u16() [L10071] ldvarg4 = tmp___0 [L10072] tmp___1 = __VERIFIER_nondet_u8() [L10073] ldvarg3 = tmp___1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg1=4294966993, ldvarg3=255, ldvarg4=65260, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, user_rmmod=0] [L10074] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=32, tmp___0=1, user_rmmod=0] [L10074] RET, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg1=4294966993, ldvarg3=255, ldvarg4=65260, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, user_rmmod=0] [L10074] tmp___2 = ldv_zalloc(32UL) [L10075] ldvarg0 = (struct mwifiex_fw_image *)tmp___2 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg3=255, ldvarg4=65260, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, user_rmmod=0] [L10076] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=4, tmp___0=1, user_rmmod=0] [L10076] RET, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg3=255, ldvarg4=65260, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, user_rmmod=0] [L10076] tmp___3 = ldv_zalloc(4UL) [L10077] ldvarg2 = (struct mwifiex_tx_param *)tmp___3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] CALL, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=16, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=16, tmp___0=1, user_rmmod=0] [L10078] RET, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] tmp___4 = ldv_zalloc(16UL) [L10079] ldvarg5 = (struct sdio_device_id *)tmp___4 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] CALL, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=80, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=80, tmp___0=1, user_rmmod=0] [L10080] RET, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] tmp___5 = ldv_zalloc(80UL) [L10081] ldvarg6 = (struct work_struct *)tmp___5 [L10082] CALL ldv_initialize() [L10616] CALL ldv_set_init(LDV_SKBS) [L10468] set = set_impl [L10469] last_index = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={315:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10616] RET ldv_set_init(LDV_SKBS) [L10082] RET ldv_initialize() [L10083] ldv_state_variable_4 = 0 [L10084] ldv_state_variable_1 = 0 [L10085] ref_cnt = 0 [L10086] ldv_state_variable_0 = 1 [L10087] ldv_state_variable_3 = 0 [L10088] ldv_state_variable_2 = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: [L10324] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10325] COND TRUE ldv_state_variable_0 == 1 [L10326] CALL, EXPR mwifiex_sdio_init_module() [L9975] int tmp ; [L9977] CALL sema_init(& add_remove_card_sem, 1) [L7459] struct lock_class_key __key ; [L7460] struct semaphore __constr_expr_0 ; [L7462] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7463] __constr_expr_0.lock.magic = 3735899821U [L7464] __constr_expr_0.lock.owner_cpu = 4294967295U [L7465] __constr_expr_0.lock.owner = (void *)-1 [L7466] __constr_expr_0.lock.dep_map.key = 0 [L7467] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7468] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7469] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7470] __constr_expr_0.lock.dep_map.cpu = 0 [L7471] __constr_expr_0.lock.dep_map.ip = 0UL [L7472] __constr_expr_0.count = (unsigned int )val [L7473] __constr_expr_0.wait_list.next = & sem->wait_list [L7474] __constr_expr_0.wait_list.prev = & sem->wait_list [L7475] *sem = __constr_expr_0 [L7476] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7477] return; [L7477] return; VAL [\old(val)=1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, sem={309:0}, sem={309:0}, set_impl={315:0}, user_rmmod=0, val=1] [L9977] RET sema_init(& add_remove_card_sem, 1) [L9978] user_rmmod = 0U [L9979] CALL, EXPR sdio_register_driver(& mwifiex_sdio) [L10826] return __VERIFIER_nondet_int(); [L9979] RET, EXPR sdio_register_driver(& mwifiex_sdio) [L9979] tmp = sdio_register_driver(& mwifiex_sdio) [L9980] return (tmp); VAL [\result=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=0, user_rmmod=0] [L10326] RET, EXPR mwifiex_sdio_init_module() [L10326] ldv_retval_7 = mwifiex_sdio_init_module() [L10327] COND FALSE !(ldv_retval_7 != 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10332] COND TRUE ldv_retval_7 == 0 [L10333] ldv_state_variable_0 = 2 [L10334] ldv_state_variable_2 = 1 [L10335] ldv_state_variable_3 = 1 [L10336] CALL ldv_initialize_sdio_driver_3() [L10029] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] CALL, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1488, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1488, tmp___0=1, user_rmmod=0] [L10031] RET, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(1488UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] tmp = ldv_zalloc(1488UL) [L10032] mwifiex_sdio_group0 = (struct sdio_func *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10336] RET ldv_initialize_sdio_driver_3() [L10337] ldv_state_variable_1 = 1 [L10338] CALL ldv_initialize_mwifiex_if_ops_1() [L10017] void *tmp ; [L10018] void *tmp___0 ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=6864, tmp___0=1, user_rmmod=0] [L10020] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] tmp = ldv_zalloc(6864UL) [L10021] sdio_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=232, tmp___0=1, user_rmmod=0] [L10022] RET, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] tmp___0 = ldv_zalloc(232UL) [L10023] sdio_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, tmp___0={0:0}, user_rmmod=0] [L10338] RET ldv_initialize_mwifiex_if_ops_1() [L10339] ldv_state_variable_4 = 1 [L10340] CALL ldv_dev_pm_ops_4() [L10038] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1416, tmp___0=1, user_rmmod=0] [L10040] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] tmp = ldv_zalloc(1416UL) [L10041] mwifiex_sdio_pm_ops_group1 = (struct device *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10340] RET ldv_dev_pm_ops_4() [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___9=1, user_rmmod=0] [L10183] COND TRUE ldv_state_variable_1 != 0 [L10184] tmp___8 = __VERIFIER_nondet_int() [L10186] case 0: [L10193] case 1: [L10200] case 2: [L10207] case 3: [L10214] case 4: [L10221] case 5: [L10228] case 6: [L10235] case 7: [L10242] case 8: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10243] COND TRUE ldv_state_variable_1 == 1 [L10244] CALL mwifiex_process_int_status(sdio_ops_group0) [L9125] struct sdio_mmc_card *card ; [L9126] struct mwifiex_sdio_card_reg const *reg ; [L9127] int ret ; [L9128] u8 sdio_ireg ; [L9129] struct sk_buff *skb ; [L9130] u8 port ; [L9131] u32 len_reg_l ; [L9132] u32 len_reg_u ; [L9133] u32 rx_blocks ; [L9134] u16 rx_len ; [L9135] unsigned long flags ; [L9136] u32 bitmap ; [L9137] u8 cr ; [L9138] raw_spinlock_t *tmp ; [L9139] u32 pkt_type ; [L9140] int tmp___0 ; [L9141] struct _ddebug descriptor ; [L9142] long tmp___1 ; [L9143] struct _ddebug descriptor___0 ; [L9144] long tmp___2 ; [L9145] struct _ddebug descriptor___1 ; [L9146] long tmp___3 ; [L9147] struct _ddebug descriptor___2 ; [L9148] long tmp___4 ; [L9149] struct _ddebug descriptor___3 ; [L9150] long tmp___5 ; [L9151] struct _ddebug descriptor___4 ; [L9152] long tmp___6 ; [L9153] struct _ddebug descriptor___5 ; [L9154] long tmp___7 ; [L9155] int tmp___8 ; [L9156] struct _ddebug descriptor___6 ; [L9157] long tmp___9 ; [L9158] int tmp___10 ; [L9159] struct _ddebug descriptor___7 ; [L9160] long tmp___11 ; [L9161] int tmp___12 ; [L9162] struct _ddebug descriptor___8 ; [L9163] long tmp___13 ; [L9164] int tmp___14 ; [L9166] EXPR adapter->card [L9166] card = (struct sdio_mmc_card *)adapter->card [L9167] EXPR card->reg [L9167] reg = card->reg [L9168] ret = 0 [L9169] port = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9170] CALL, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, lock={0:891}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7253] return (& lock->ldv_6338.rlock); VAL [\result={0:891}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, lock={0:891}, lock={0:891}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9170] RET, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, spinlock_check(& adapter->int_lock)={0:891}, user_rmmod=0] [L9170] tmp = spinlock_check(& adapter->int_lock) [L9171] CALL, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, arg0={0:891}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10693] return __VERIFIER_nondet_ulong(); [L9171] RET, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, _raw_spin_lock_irqsave(tmp)=18446744073709551363, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9171] flags = _raw_spin_lock_irqsave(tmp) [L9172] EXPR adapter->int_status [L9172] sdio_ireg = adapter->int_status [L9173] adapter->int_status = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9174] CALL spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7259] FCALL _raw_spin_unlock_irqrestore(& lock->ldv_6338.rlock, flags) [L9174] RET spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9175] COND FALSE !((unsigned int )sdio_ireg == 0U) [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9179] EXPR adapter->cmd_sent [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U VAL [(int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U=1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, adapter->cmd_sent=-255, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9179] COND TRUE (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9180] adapter->cmd_sent = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9183] COND TRUE ((unsigned int )sdio_ireg & 64U) != 0U [L9184] EXPR card->mp_regs [L9184] EXPR card->mp_regs + 181UL [L9184] rx_len = (int )((u16 )*(card->mp_regs + 181UL)) << 8U [L9185] EXPR card->mp_regs [L9185] EXPR card->mp_regs + 180UL [L9185] rx_len = (int )((u16 )*(card->mp_regs + 180UL)) | (int )rx_len [L9186] rx_blocks = (u32 )(((int )rx_len + 255) / 256) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=5, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9187] COND FALSE !((unsigned int )rx_len <= 4U || rx_blocks * 256U > 4096U) [L9191] rx_len = (unsigned int )((unsigned short )rx_blocks) * 256U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10455] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10600] void *skb ; [L10601] void *tmp___7 ; VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND FALSE !(tmp___0 != 0) [L7390] EXPR, FCALL calloc(1UL, size) [L7390] tmp = calloc(1UL, size) [L7391] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, calloc(1UL, size)={-18446744073709551615:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={-18446744073709551615:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L7392] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7361] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7392] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, calloc(1UL, size)={-18446744073709551615:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={-18446744073709551615:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L7393] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551615:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, calloc(1UL, size)={-18446744073709551615:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={-18446744073709551615:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, user_rmmod=0] [L10603] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551615:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L10604] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, user_rmmod=0] [L10605] COND FALSE !(! skb) [L10608] CALL ldv_set_add(LDV_SKBS, skb) [L10476] int i ; [L10478] i = 0 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10479] COND TRUE 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10480] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10490] COND TRUE last_index < 15 [L10491] set_impl[last_index] = e [L10492] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10608] RET ldv_set_add(LDV_SKBS, skb) [L10609] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551615:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, user_rmmod=0] [L10457] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_skb_alloc()={-18446744073709551615:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] tmp = ldv_skb_alloc() [L10458] return (tmp); VAL [\old(last_index)=0, \old(length)=256, \result={-18446744073709551615:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={-18446744073709551615:0}, user_rmmod=0] [L9192] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, ldv_dev_alloc_skb_14((unsigned int )rx_len)={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] skb = ldv_dev_alloc_skb_14((unsigned int )rx_len) [L9193] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, user_rmmod=0] [L9197] CALL skb_put(skb, (unsigned int )rx_len) VAL [\old(arg1)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, arg0={-18446744073709551615:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10857] EXPR arg0->data [L10857] EXPR arg0->tail [L10857] unsigned char *ret_val = arg0->data + arg0->tail; [L10858] EXPR arg0->tail [L10858] arg0->tail += arg1 [L10859] return ret_val; VAL [\old(arg1)=256, \result={316:18446744073709551300}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, arg0={-18446744073709551615:0}, arg0={-18446744073709551615:0}, arg1=256, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, ret_val={316:18446744073709551300}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9197] RET skb_put(skb, (unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, skb_put(skb, (unsigned int )rx_len)={316:18446744073709551300}, tmp={0:891}, user_rmmod=0] [L9198] EXPR skb->data [L9198] EXPR skb->len [L9199] EXPR adapter->ioport VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, adapter->ioport=18446744073709551350, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, skb->data={316:18446744073709551300}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] CALL, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [\old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={316:18446744073709551300}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={325:0}, user_rmmod=0] [L8505] int ret ; [L8506] u32 nb ; VAL [\old(ioport)=4294967048, \old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={316:18446744073709551300}, buffer={316:18446744073709551300}, card_reset_work={313:0}, ioport=4294967048, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={325:0}, type={325:0}, user_rmmod=0] [L8508] COND TRUE (unsigned long )buffer == (unsigned long )((u8 *)0U) [L8509] adapter->dev [L8510] return (-1); VAL [\old(ioport)=4294967048, \old(npayload)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={316:18446744073709551300}, buffer={316:18446744073709551300}, card_reset_work={313:0}, ioport=4294967048, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={325:0}, type={325:0}, user_rmmod=0] [L9198-L9199] RET, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, adapter->ioport=18446744073709551350, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U)=-1, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, skb->data={316:18446744073709551300}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] tmp___0 = mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) [L9200] COND TRUE tmp___0 != 0 [L9201] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9203] CALL dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7486] FCALL __dev_kfree_skb_any(skb, 1) [L9203] RET dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={320:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={320:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={320:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=255] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={320:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=255] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); VAL [\old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=255] [L9368] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] tmp___10 = mwifiex_read_reg(adapter, 0U, & cr) [L9369] COND TRUE tmp___10 != 0 [L9370] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] EXPR \read(cr) VAL [\read(cr)=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] CALL, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7901] struct sdio_mmc_card *card ; [L7902] int ret ; [L7904] EXPR adapter->card [L7904] card = (struct sdio_mmc_card *)adapter->card [L7905] EXPR card->func VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7905] FCALL sdio_claim_host(card->func) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] EXPR card->func VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] CALL, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=0, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, func={18446744073709551333:18446744073709551317}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7892] int ret ; [L7894] ret = -1 [L7895] FCALL sdio_writeb(func, (int )data, reg, & ret) [L7896] EXPR \read(ret) [L7896] return (ret); [L7896] return (ret); VAL [\old(data)=0, \old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, data=0, func={18446744073709551333:18446744073709551317}, func={18446744073709551333:18446744073709551317}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] RET, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551333:18446744073709551317}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg_locked(card->func, reg, (int )data)=-1, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] ret = mwifiex_write_reg_locked(card->func, reg, (int )data) [L7907] EXPR card->func VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551308:18446744073709551307}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7907] FCALL sdio_release_host(card->func) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551308:18446744073709551307}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7908] return (ret); VAL [\old(data)=-256, \old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9385] RET, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\read(cr)=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U))=-1, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] tmp___12 = mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) [L9386] COND TRUE tmp___12 != 0 [L9387] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551308:18446744073709551307}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={322:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551308:18446744073709551307}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={322:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551308:18446744073709551307}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={322:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=9] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card->func={18446744073709551308:18446744073709551307}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={322:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=9] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); VAL [\old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, data={642:0}, data={642:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=9] [L9401] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] tmp___14 = mwifiex_read_reg(adapter, 0U, & cr) [L9402] COND TRUE tmp___14 != 0 [L9403] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, cr={642:0}, descriptor={326:0}, descriptor___0={321:0}, descriptor___1={324:0}, descriptor___2={327:0}, descriptor___3={328:0}, descriptor___4={329:0}, descriptor___5={330:0}, descriptor___6={331:0}, descriptor___7={332:0}, descriptor___8={333:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={325:0}, port={323:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); VAL [\result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={319:0}, card_reset_work={313:0}, flags=18446744073709551363, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg={18446744073709551353:18446744073709551346}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=255, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551615:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L10244] RET mwifiex_process_int_status(sdio_ops_group0) [L10245] ldv_state_variable_1 = 1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=1, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=0] [L10317] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L10318] CALL mwifiex_sdio_cleanup_module() [L9985] int tmp ; [L9987] CALL, EXPR down_interruptible(& add_remove_card_sem) [L10712] return __VERIFIER_nondet_int(); [L9987] RET, EXPR down_interruptible(& add_remove_card_sem) [L9987] tmp = down_interruptible(& add_remove_card_sem) [L9988] COND FALSE !(tmp == 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=1, user_rmmod=0] [L9992] user_rmmod = 1U [L9993] CALL cancel_work_sync(& card_reset_work) [L10700] return __VERIFIER_nondet_bool(); [L9993] RET cancel_work_sync(& card_reset_work) [L9994] FCALL sdio_unregister_driver(& mwifiex_sdio) [L10318] RET mwifiex_sdio_cleanup_module() [L10319] ldv_state_variable_0 = 3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294966993, ldvarg2={0:0}, ldvarg3=255, ldvarg4=65260, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294966993, tmp___0=65260, tmp___1=255, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=1] [L10407] CALL ldv_check_final_state() [L10667] int tmp___7 ; [L10669] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L10558] return (last_index == 0); VAL [\result=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=1] [L10669] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L10669] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L10670] COND FALSE !(\read(tmp___7)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp___7=0, user_rmmod=1] [L10672] CALL ldv_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] [L7417] reach_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551341:18446744073709551347}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 41 procedures, 1068 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 164.1s, OverallIterations: 10, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 111.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 20 mSolverCounterUnknown, 10207 SdHoareTripleChecker+Valid, 109.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 9359 mSDsluCounter, 113968 SdHoareTripleChecker+Invalid, 102.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 96223 mSDsCounter, 3086 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 17855 IncrementalHoareTripleChecker+Invalid, 20961 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3086 mSolverCounterUnsat, 17745 mSDtfsCounter, 17855 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 342 GetRequests, 260 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4137occurred in iteration=2, InterpolantAutomatonStates: 74, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 9 MinimizatonAttempts, 7729 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 46.1s SatisfiabilityAnalysisTime, 3.0s InterpolantComputationTime, 1508 NumberOfCodeBlocks, 1508 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 1273 ConstructedInterpolants, 0 QuantifiedInterpolants, 2806 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 9 InterpolantComputations, 9 PerfectInterpolantSequences, 1105/1105 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 23:08:30,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:08:31,698 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:08:31,699 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:08:31,735 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:08:31,735 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:08:31,736 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:08:31,738 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:08:31,740 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:08:31,741 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:08:31,742 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:08:31,743 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:08:31,744 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:08:31,744 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:08:31,745 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:08:31,746 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:08:31,747 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:08:31,748 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:08:31,749 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:08:31,751 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:08:31,752 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:08:31,754 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:08:31,755 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:08:31,756 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:08:31,757 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:08:31,759 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:08:31,760 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:08:31,760 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:08:31,761 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:08:31,761 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:08:31,762 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:08:31,762 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:08:31,763 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:08:31,764 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:08:31,764 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:08:31,765 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:08:31,765 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:08:31,766 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:08:31,766 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:08:31,766 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:08:31,767 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:08:31,767 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:08:31,768 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-06 23:08:31,787 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:08:31,787 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:08:31,787 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:08:31,788 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:08:31,788 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:08:31,788 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:08:31,789 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:08:31,789 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:08:31,789 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:08:31,789 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:08:31,789 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:08:31,789 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:08:31,789 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:08:31,790 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:08:31,790 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-06 23:08:31,790 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-06 23:08:31,790 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-06 23:08:31,790 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:08:31,790 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:08:31,790 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:08:31,790 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:08:31,791 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:08:31,791 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:08:31,791 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:08:31,791 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:08:31,791 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:08:31,791 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:08:31,791 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-06 23:08:31,791 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-06 23:08:31,792 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:08:31,792 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:08:31,792 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:08:31,792 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:08:31,792 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-06 23:08:31,792 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-12-06 23:08:32,015 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:08:32,033 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:08:32,035 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:08:32,035 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:08:32,036 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:08:32,037 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-06 23:08:32,078 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/43efa2698/ee464a185d0c40399f4bf51bc38faa5d/FLAGe96c9cb48 [2021-12-06 23:08:32,695 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:08:32,696 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-06 23:08:32,721 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/43efa2698/ee464a185d0c40399f4bf51bc38faa5d/FLAGe96c9cb48 [2021-12-06 23:08:33,144 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/data/43efa2698/ee464a185d0c40399f4bf51bc38faa5d [2021-12-06 23:08:33,149 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:08:33,151 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:08:33,152 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:08:33,152 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:08:33,155 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:08:33,156 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:08:33" (1/1) ... [2021-12-06 23:08:33,156 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@77abd84d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:33, skipping insertion in model container [2021-12-06 23:08:33,156 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:08:33" (1/1) ... [2021-12-06 23:08:33,161 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:08:33,268 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:08:33,872 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-06 23:08:34,461 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:08:34,491 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-06 23:08:34,548 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:08:34,640 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-06 23:08:34,772 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:08:34,782 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:08:34,872 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-06 23:08:35,057 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:08:35,175 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:08:35,176 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35 WrapperNode [2021-12-06 23:08:35,176 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:08:35,177 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:08:35,177 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:08:35,177 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:08:35,182 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,240 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,353 INFO L137 Inliner]: procedures = 203, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4723 [2021-12-06 23:08:35,353 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:08:35,354 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:08:35,354 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:08:35,354 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:08:35,360 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,360 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,386 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,386 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,468 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,490 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,506 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,526 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:08:35,527 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:08:35,527 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:08:35,527 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:08:35,528 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (1/1) ... [2021-12-06 23:08:35,533 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:08:35,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:08:35,553 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:08:35,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:08:35,592 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-06 23:08:35,592 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-06 23:08:35,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2021-12-06 23:08:35,593 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:08:35,593 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:08:35,593 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2021-12-06 23:08:35,593 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2021-12-06 23:08:35,594 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:08:35,594 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:08:35,594 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-06 23:08:35,594 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-06 23:08:35,594 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-06 23:08:35,594 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-06 23:08:35,594 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-12-06 23:08:35,594 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-12-06 23:08:35,594 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-12-06 23:08:35,594 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-12-06 23:08:35,594 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-12-06 23:08:35,594 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-12-06 23:08:35,595 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:08:35,595 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:08:35,595 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2021-12-06 23:08:35,595 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2021-12-06 23:08:35,595 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:08:35,595 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:08:35,595 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-12-06 23:08:35,595 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-12-06 23:08:35,596 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2021-12-06 23:08:35,596 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2021-12-06 23:08:35,596 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:08:35,596 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2021-12-06 23:08:35,596 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2021-12-06 23:08:35,596 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2021-12-06 23:08:35,596 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2021-12-06 23:08:35,596 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:08:35,597 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-12-06 23:08:35,597 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-06 23:08:35,597 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-06 23:08:35,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-06 23:08:35,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-06 23:08:35,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-06 23:08:35,597 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:08:35,598 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-06 23:08:35,598 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2021-12-06 23:08:35,598 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2021-12-06 23:08:35,598 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:08:35,598 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-06 23:08:35,598 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-06 23:08:35,598 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-06 23:08:35,599 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-06 23:08:35,599 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-06 23:08:35,599 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-06 23:08:35,599 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2021-12-06 23:08:35,599 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2021-12-06 23:08:35,599 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-12-06 23:08:35,599 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-12-06 23:08:35,599 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2021-12-06 23:08:35,600 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2021-12-06 23:08:35,600 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2021-12-06 23:08:35,600 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2021-12-06 23:08:35,600 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 23:08:35,600 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 23:08:35,600 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2021-12-06 23:08:35,600 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2021-12-06 23:08:35,601 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2021-12-06 23:08:35,601 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2021-12-06 23:08:35,601 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2021-12-06 23:08:35,601 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2021-12-06 23:08:35,601 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2021-12-06 23:08:35,601 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2021-12-06 23:08:35,601 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2021-12-06 23:08:35,602 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2021-12-06 23:08:35,602 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 23:08:35,602 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 23:08:35,602 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2021-12-06 23:08:35,602 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2021-12-06 23:08:35,602 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-12-06 23:08:35,602 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-12-06 23:08:35,602 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:08:35,603 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:08:35,603 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-06 23:08:35,603 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-06 23:08:35,603 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-06 23:08:35,603 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-06 23:08:35,603 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:08:35,603 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:08:35,603 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-06 23:08:35,604 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:08:35,604 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-06 23:08:35,604 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-06 23:08:35,604 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:08:35,604 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2021-12-06 23:08:35,604 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2021-12-06 23:08:35,604 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:08:35,604 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-06 23:08:35,605 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-06 23:08:35,605 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2021-12-06 23:08:35,605 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2021-12-06 23:08:35,605 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-06 23:08:35,605 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-06 23:08:35,605 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-06 23:08:35,605 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2021-12-06 23:08:35,605 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2021-12-06 23:08:35,606 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-06 23:08:35,606 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-06 23:08:35,606 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:08:35,606 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:08:36,011 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:08:36,013 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:08:36,134 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:09:20,751 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:09:20,768 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:09:20,768 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 23:09:20,771 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:09:20 BoogieIcfgContainer [2021-12-06 23:09:20,771 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:09:20,773 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:09:20,773 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:09:20,775 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:09:20,775 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:08:33" (1/3) ... [2021-12-06 23:09:20,775 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24fc4e6e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:09:20, skipping insertion in model container [2021-12-06 23:09:20,776 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:08:35" (2/3) ... [2021-12-06 23:09:20,776 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24fc4e6e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:09:20, skipping insertion in model container [2021-12-06 23:09:20,776 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:09:20" (3/3) ... [2021-12-06 23:09:20,777 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-06 23:09:20,780 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:09:20,780 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:09:20,818 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:09:20,823 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:09:20,823 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:09:20,854 INFO L276 IsEmpty]: Start isEmpty. Operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2021-12-06 23:09:20,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 23:09:20,863 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:20,863 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:20,864 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:20,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:20,868 INFO L85 PathProgramCache]: Analyzing trace with hash -601957003, now seen corresponding path program 1 times [2021-12-06 23:09:20,880 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:20,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2031517655] [2021-12-06 23:09:20,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:20,881 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:20,881 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:20,882 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:20,884 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-06 23:09:21,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:21,686 INFO L263 TraceCheckSpWp]: Trace formula consists of 1188 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:09:21,690 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:21,878 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:09:21,878 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:21,879 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:21,879 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2031517655] [2021-12-06 23:09:21,879 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2031517655] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:21,879 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:21,880 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:09:21,881 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [90247646] [2021-12-06 23:09:21,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:21,885 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:09:21,885 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:21,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:09:21,905 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:09:21,909 INFO L87 Difference]: Start difference. First operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:09:24,123 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.07s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:09:24,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:09:24,352 INFO L93 Difference]: Finished difference Result 3148 states and 4714 transitions. [2021-12-06 23:09:24,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:09:24,354 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-06 23:09:24,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:09:24,377 INFO L225 Difference]: With dead ends: 3148 [2021-12-06 23:09:24,377 INFO L226 Difference]: Without dead ends: 2066 [2021-12-06 23:09:24,385 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:09:24,388 INFO L933 BasicCegarLoop]: 1770 mSDtfsCounter, 1505 mSDsluCounter, 1560 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1505 SdHoareTripleChecker+Valid, 3330 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:09:24,388 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1505 Valid, 3330 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 1 Unknown, 0 Unchecked, 2.3s Time] [2021-12-06 23:09:24,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2066 states. [2021-12-06 23:09:24,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2066 to 2066. [2021-12-06 23:09:24,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2066 states, 1626 states have (on average 1.4317343173431734) internal successors, (2328), 1636 states have internal predecessors, (2328), 363 states have call successors, (363), 77 states have call predecessors, (363), 76 states have return successors, (362), 360 states have call predecessors, (362), 362 states have call successors, (362) [2021-12-06 23:09:24,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2066 states to 2066 states and 3053 transitions. [2021-12-06 23:09:24,541 INFO L78 Accepts]: Start accepts. Automaton has 2066 states and 3053 transitions. Word has length 46 [2021-12-06 23:09:24,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:09:24,541 INFO L470 AbstractCegarLoop]: Abstraction has 2066 states and 3053 transitions. [2021-12-06 23:09:24,541 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:09:24,542 INFO L276 IsEmpty]: Start isEmpty. Operand 2066 states and 3053 transitions. [2021-12-06 23:09:24,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 23:09:24,545 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:24,546 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:24,566 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:09:24,746 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:09:24,746 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:24,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:24,747 INFO L85 PathProgramCache]: Analyzing trace with hash -1981556391, now seen corresponding path program 1 times [2021-12-06 23:09:24,748 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:24,748 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1554168945] [2021-12-06 23:09:24,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:24,749 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:24,749 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:24,750 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:24,751 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-06 23:09:25,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:25,909 INFO L263 TraceCheckSpWp]: Trace formula consists of 1570 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:09:25,912 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:26,243 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:09:26,243 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:26,244 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:26,244 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1554168945] [2021-12-06 23:09:26,244 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1554168945] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:26,244 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:26,244 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:09:26,244 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1664012695] [2021-12-06 23:09:26,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:26,246 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:09:26,246 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:26,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:09:26,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:09:26,247 INFO L87 Difference]: Start difference. First operand 2066 states and 3053 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:09:26,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:09:26,708 INFO L93 Difference]: Finished difference Result 6171 states and 9137 transitions. [2021-12-06 23:09:26,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:09:26,709 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-06 23:09:26,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:09:26,731 INFO L225 Difference]: With dead ends: 6171 [2021-12-06 23:09:26,731 INFO L226 Difference]: Without dead ends: 4107 [2021-12-06 23:09:26,738 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:09:26,739 INFO L933 BasicCegarLoop]: 1941 mSDtfsCounter, 1533 mSDsluCounter, 5417 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1533 SdHoareTripleChecker+Valid, 7358 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:09:26,739 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1533 Valid, 7358 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 23:09:26,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4107 states. [2021-12-06 23:09:26,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4107 to 4107. [2021-12-06 23:09:26,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4107 states, 3233 states have (on average 1.4327250231982678) internal successors, (4632), 3253 states have internal predecessors, (4632), 721 states have call successors, (721), 153 states have call predecessors, (721), 152 states have return successors, (726), 716 states have call predecessors, (726), 720 states have call successors, (726) [2021-12-06 23:09:26,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4107 states to 4107 states and 6079 transitions. [2021-12-06 23:09:26,898 INFO L78 Accepts]: Start accepts. Automaton has 4107 states and 6079 transitions. Word has length 46 [2021-12-06 23:09:26,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:09:26,898 INFO L470 AbstractCegarLoop]: Abstraction has 4107 states and 6079 transitions. [2021-12-06 23:09:26,898 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:09:26,899 INFO L276 IsEmpty]: Start isEmpty. Operand 4107 states and 6079 transitions. [2021-12-06 23:09:26,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2021-12-06 23:09:26,908 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:26,908 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:26,943 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-06 23:09:27,109 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:09:27,109 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:27,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:27,110 INFO L85 PathProgramCache]: Analyzing trace with hash -642422905, now seen corresponding path program 1 times [2021-12-06 23:09:27,111 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:27,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [49187026] [2021-12-06 23:09:27,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:27,111 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:27,111 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:27,112 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:27,113 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-06 23:09:28,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:28,395 INFO L263 TraceCheckSpWp]: Trace formula consists of 1944 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:09:28,400 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:28,846 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:09:28,846 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:28,846 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:28,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [49187026] [2021-12-06 23:09:28,846 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [49187026] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:28,846 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:28,846 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:09:28,847 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1485060478] [2021-12-06 23:09:28,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:28,847 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:09:28,847 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:28,848 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:09:28,848 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:09:28,848 INFO L87 Difference]: Start difference. First operand 4107 states and 6079 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 23:09:31,591 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:09:33,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:09:33,885 INFO L93 Difference]: Finished difference Result 6853 states and 10078 transitions. [2021-12-06 23:09:33,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:09:33,886 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 103 [2021-12-06 23:09:33,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:09:33,905 INFO L225 Difference]: With dead ends: 6853 [2021-12-06 23:09:33,905 INFO L226 Difference]: Without dead ends: 2758 [2021-12-06 23:09:33,917 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:09:33,918 INFO L933 BasicCegarLoop]: 1595 mSDtfsCounter, 338 mSDsluCounter, 1484 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 3079 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2021-12-06 23:09:33,918 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [338 Valid, 3079 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 53 Invalid, 1 Unknown, 0 Unchecked, 4.9s Time] [2021-12-06 23:09:33,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2758 states. [2021-12-06 23:09:34,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2758 to 2741. [2021-12-06 23:09:34,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2741 states, 2177 states have (on average 1.4244372990353698) internal successors, (3101), 2189 states have internal predecessors, (3101), 446 states have call successors, (446), 118 states have call predecessors, (446), 117 states have return successors, (448), 441 states have call predecessors, (448), 445 states have call successors, (448) [2021-12-06 23:09:34,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2741 states to 2741 states and 3995 transitions. [2021-12-06 23:09:34,030 INFO L78 Accepts]: Start accepts. Automaton has 2741 states and 3995 transitions. Word has length 103 [2021-12-06 23:09:34,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:09:34,030 INFO L470 AbstractCegarLoop]: Abstraction has 2741 states and 3995 transitions. [2021-12-06 23:09:34,031 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 23:09:34,031 INFO L276 IsEmpty]: Start isEmpty. Operand 2741 states and 3995 transitions. [2021-12-06 23:09:34,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2021-12-06 23:09:34,036 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:34,036 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:34,066 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-06 23:09:34,237 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:09:34,237 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:34,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:34,238 INFO L85 PathProgramCache]: Analyzing trace with hash 96929181, now seen corresponding path program 1 times [2021-12-06 23:09:34,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:34,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [343115275] [2021-12-06 23:09:34,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:34,239 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:34,240 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:34,240 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:34,241 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-06 23:09:35,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:35,601 INFO L263 TraceCheckSpWp]: Trace formula consists of 2056 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 23:09:35,606 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:36,080 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-06 23:09:36,080 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:36,081 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:36,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [343115275] [2021-12-06 23:09:36,081 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [343115275] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:36,081 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:36,081 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:09:36,081 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1207716172] [2021-12-06 23:09:36,081 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:36,082 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:09:36,082 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:36,082 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:09:36,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:09:36,082 INFO L87 Difference]: Start difference. First operand 2741 states and 3995 transitions. Second operand has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-06 23:09:36,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:09:36,237 INFO L93 Difference]: Finished difference Result 5276 states and 7721 transitions. [2021-12-06 23:09:36,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:09:36,237 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2021-12-06 23:09:36,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:09:36,257 INFO L225 Difference]: With dead ends: 5276 [2021-12-06 23:09:36,257 INFO L226 Difference]: Without dead ends: 2757 [2021-12-06 23:09:36,265 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:09:36,266 INFO L933 BasicCegarLoop]: 1552 mSDtfsCounter, 2 mSDsluCounter, 4651 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 6203 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:09:36,266 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 6203 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:09:36,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2757 states. [2021-12-06 23:09:36,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2757 to 2751. [2021-12-06 23:09:36,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2751 states, 2184 states have (on average 1.4230769230769231) internal successors, (3108), 2197 states have internal predecessors, (3108), 446 states have call successors, (446), 118 states have call predecessors, (446), 120 states have return successors, (459), 443 states have call predecessors, (459), 445 states have call successors, (459) [2021-12-06 23:09:36,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2751 states to 2751 states and 4013 transitions. [2021-12-06 23:09:36,395 INFO L78 Accepts]: Start accepts. Automaton has 2751 states and 4013 transitions. Word has length 144 [2021-12-06 23:09:36,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:09:36,396 INFO L470 AbstractCegarLoop]: Abstraction has 2751 states and 4013 transitions. [2021-12-06 23:09:36,396 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-06 23:09:36,397 INFO L276 IsEmpty]: Start isEmpty. Operand 2751 states and 4013 transitions. [2021-12-06 23:09:36,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-12-06 23:09:36,402 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:36,403 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:36,446 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-06 23:09:36,603 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:09:36,603 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:36,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:36,604 INFO L85 PathProgramCache]: Analyzing trace with hash 36910958, now seen corresponding path program 1 times [2021-12-06 23:09:36,605 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:36,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [143104277] [2021-12-06 23:09:36,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:36,606 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:36,606 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:36,607 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:36,607 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-06 23:09:37,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:38,108 INFO L263 TraceCheckSpWp]: Trace formula consists of 2082 conjuncts, 24 conjunts are in the unsatisfiable core [2021-12-06 23:09:38,112 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:39,706 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-06 23:09:39,706 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:39,706 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:39,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [143104277] [2021-12-06 23:09:39,706 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [143104277] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:39,706 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:39,706 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 23:09:39,707 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [783891854] [2021-12-06 23:09:39,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:39,707 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 23:09:39,707 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:39,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 23:09:39,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:09:39,708 INFO L87 Difference]: Start difference. First operand 2751 states and 4013 transitions. Second operand has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2021-12-06 23:09:43,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:09:43,150 INFO L93 Difference]: Finished difference Result 6653 states and 9907 transitions. [2021-12-06 23:09:43,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:09:43,152 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) Word has length 151 [2021-12-06 23:09:43,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:09:43,180 INFO L225 Difference]: With dead ends: 6653 [2021-12-06 23:09:43,180 INFO L226 Difference]: Without dead ends: 4124 [2021-12-06 23:09:43,188 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 154 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2021-12-06 23:09:43,189 INFO L933 BasicCegarLoop]: 2400 mSDtfsCounter, 815 mSDsluCounter, 25428 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 949 SdHoareTripleChecker+Valid, 27828 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2021-12-06 23:09:43,189 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [949 Valid, 27828 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2021-12-06 23:09:43,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4124 states. [2021-12-06 23:09:43,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4124 to 2763. [2021-12-06 23:09:43,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4204286365709073) internal successors, (3115), 2205 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:09:43,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4025 transitions. [2021-12-06 23:09:43,361 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4025 transitions. Word has length 151 [2021-12-06 23:09:43,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:09:43,361 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4025 transitions. [2021-12-06 23:09:43,361 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2021-12-06 23:09:43,362 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4025 transitions. [2021-12-06 23:09:43,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-06 23:09:43,371 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:43,371 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:43,403 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2021-12-06 23:09:43,572 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:09:43,572 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:43,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:43,573 INFO L85 PathProgramCache]: Analyzing trace with hash 1511771000, now seen corresponding path program 1 times [2021-12-06 23:09:43,575 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:43,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1844095618] [2021-12-06 23:09:43,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:43,575 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:43,575 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:43,576 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:43,577 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-06 23:09:45,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:45,414 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 23:09:45,420 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:46,063 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2021-12-06 23:09:46,064 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:46,064 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:46,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1844095618] [2021-12-06 23:09:46,064 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1844095618] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:46,064 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:46,064 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:09:46,064 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1849487957] [2021-12-06 23:09:46,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:46,065 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:09:46,065 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:46,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:09:46,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:09:46,066 INFO L87 Difference]: Start difference. First operand 2763 states and 4025 transitions. Second operand has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-06 23:09:49,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:09:49,533 INFO L93 Difference]: Finished difference Result 6577 states and 9760 transitions. [2021-12-06 23:09:49,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:09:49,534 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-12-06 23:09:49,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:09:49,554 INFO L225 Difference]: With dead ends: 6577 [2021-12-06 23:09:49,554 INFO L226 Difference]: Without dead ends: 4036 [2021-12-06 23:09:49,560 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:09:49,560 INFO L933 BasicCegarLoop]: 2259 mSDtfsCounter, 770 mSDsluCounter, 8119 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 10378 SdHoareTripleChecker+Invalid, 330 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:09:49,561 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [897 Valid, 10378 Invalid, 330 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2021-12-06 23:09:49,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4036 states. [2021-12-06 23:09:49,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4036 to 2763. [2021-12-06 23:09:49,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4195166438668492) internal successors, (3113), 2205 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:09:49,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4023 transitions. [2021-12-06 23:09:49,661 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4023 transitions. Word has length 190 [2021-12-06 23:09:49,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:09:49,661 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4023 transitions. [2021-12-06 23:09:49,661 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-06 23:09:49,661 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4023 transitions. [2021-12-06 23:09:49,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-06 23:09:49,667 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:49,668 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:49,716 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-12-06 23:09:49,868 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:09:49,869 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:49,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:49,869 INFO L85 PathProgramCache]: Analyzing trace with hash -1944162634, now seen corresponding path program 1 times [2021-12-06 23:09:49,871 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:49,871 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [402397353] [2021-12-06 23:09:49,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:49,871 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:49,871 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:49,872 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:49,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-06 23:09:51,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:51,677 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 14 conjunts are in the unsatisfiable core [2021-12-06 23:09:51,688 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:52,333 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-06 23:09:52,333 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:52,333 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:52,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [402397353] [2021-12-06 23:09:52,334 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [402397353] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:52,334 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:52,334 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:09:52,334 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1864534623] [2021-12-06 23:09:52,334 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:52,335 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:09:52,335 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:52,335 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:09:52,335 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:09:52,335 INFO L87 Difference]: Start difference. First operand 2763 states and 4023 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-06 23:09:55,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:09:55,555 INFO L93 Difference]: Finished difference Result 6579 states and 9758 transitions. [2021-12-06 23:09:55,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:09:55,556 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-12-06 23:09:55,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:09:55,579 INFO L225 Difference]: With dead ends: 6579 [2021-12-06 23:09:55,579 INFO L226 Difference]: Without dead ends: 4038 [2021-12-06 23:09:55,584 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:09:55,585 INFO L933 BasicCegarLoop]: 2275 mSDtfsCounter, 762 mSDsluCounter, 8176 mSDsCounter, 0 mSdLazyCounter, 331 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 888 SdHoareTripleChecker+Valid, 10451 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 331 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:09:55,585 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [888 Valid, 10451 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 331 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2021-12-06 23:09:55,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4038 states. [2021-12-06 23:09:55,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4038 to 2763. [2021-12-06 23:09:55,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4186046511627908) internal successors, (3111), 2205 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:09:55,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4021 transitions. [2021-12-06 23:09:55,686 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4021 transitions. Word has length 190 [2021-12-06 23:09:55,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:09:55,686 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4021 transitions. [2021-12-06 23:09:55,686 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-06 23:09:55,687 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4021 transitions. [2021-12-06 23:09:55,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-06 23:09:55,692 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:09:55,692 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:09:55,739 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-12-06 23:09:55,893 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:09:55,894 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:09:55,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:09:55,895 INFO L85 PathProgramCache]: Analyzing trace with hash 1858178488, now seen corresponding path program 1 times [2021-12-06 23:09:55,898 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:09:55,898 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1416965587] [2021-12-06 23:09:55,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:09:55,899 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:09:55,899 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:09:55,900 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:09:55,903 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-06 23:09:58,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:09:58,361 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 14 conjunts are in the unsatisfiable core [2021-12-06 23:09:58,367 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:09:58,949 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 54 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-06 23:09:58,949 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:09:58,949 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:09:58,950 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1416965587] [2021-12-06 23:09:58,950 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1416965587] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:09:58,950 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:09:58,950 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:09:58,950 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1533193088] [2021-12-06 23:09:58,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:09:58,951 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:09:58,951 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:09:58,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:09:58,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:09:58,951 INFO L87 Difference]: Start difference. First operand 2763 states and 4021 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-06 23:10:01,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:10:01,988 INFO L93 Difference]: Finished difference Result 6687 states and 9929 transitions. [2021-12-06 23:10:01,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:10:01,990 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-12-06 23:10:01,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:10:02,012 INFO L225 Difference]: With dead ends: 6687 [2021-12-06 23:10:02,012 INFO L226 Difference]: Without dead ends: 4146 [2021-12-06 23:10:02,018 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:10:02,019 INFO L933 BasicCegarLoop]: 2354 mSDtfsCounter, 818 mSDsluCounter, 8425 mSDsCounter, 0 mSdLazyCounter, 350 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 955 SdHoareTripleChecker+Valid, 10779 SdHoareTripleChecker+Invalid, 350 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 350 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2021-12-06 23:10:02,019 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [955 Valid, 10779 Invalid, 350 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 350 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2021-12-06 23:10:02,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4146 states. [2021-12-06 23:10:02,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4146 to 2763. [2021-12-06 23:10:02,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4176926584587324) internal successors, (3109), 2205 states have internal predecessors, (3109), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:10:02,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4019 transitions. [2021-12-06 23:10:02,121 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4019 transitions. Word has length 190 [2021-12-06 23:10:02,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:10:02,121 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4019 transitions. [2021-12-06 23:10:02,122 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-06 23:10:02,122 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4019 transitions. [2021-12-06 23:10:02,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-06 23:10:02,128 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:10:02,128 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:10:02,168 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-12-06 23:10:02,329 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:10:02,330 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:10:02,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:10:02,332 INFO L85 PathProgramCache]: Analyzing trace with hash -1757516554, now seen corresponding path program 1 times [2021-12-06 23:10:02,337 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:10:02,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1048458257] [2021-12-06 23:10:02,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:10:02,339 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:10:02,339 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:10:02,341 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:10:02,344 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-06 23:10:04,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:10:04,456 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 23:10:04,461 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:10:04,896 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2021-12-06 23:10:04,896 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:10:04,896 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:10:04,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1048458257] [2021-12-06 23:10:04,896 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1048458257] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:10:04,896 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:10:04,897 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:10:04,897 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [174785641] [2021-12-06 23:10:04,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:10:04,897 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 23:10:04,898 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:10:04,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:10:04,898 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:10:04,898 INFO L87 Difference]: Start difference. First operand 2763 states and 4019 transitions. Second operand has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 23:10:08,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:10:08,054 INFO L93 Difference]: Finished difference Result 7932 states and 11897 transitions. [2021-12-06 23:10:08,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:10:08,054 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 190 [2021-12-06 23:10:08,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:10:08,069 INFO L225 Difference]: With dead ends: 7932 [2021-12-06 23:10:08,069 INFO L226 Difference]: Without dead ends: 5391 [2021-12-06 23:10:08,074 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 188 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:10:08,074 INFO L933 BasicCegarLoop]: 2511 mSDtfsCounter, 1773 mSDsluCounter, 4068 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 192 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1885 SdHoareTripleChecker+Valid, 6579 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 192 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:10:08,074 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1885 Valid, 6579 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [192 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2021-12-06 23:10:08,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5391 states. [2021-12-06 23:10:08,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5391 to 2767. [2021-12-06 23:10:08,178 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2767 states, 2197 states have (on average 1.4169321802457897) internal successors, (3113), 2209 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:10:08,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2767 states to 2767 states and 4023 transitions. [2021-12-06 23:10:08,184 INFO L78 Accepts]: Start accepts. Automaton has 2767 states and 4023 transitions. Word has length 190 [2021-12-06 23:10:08,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:10:08,184 INFO L470 AbstractCegarLoop]: Abstraction has 2767 states and 4023 transitions. [2021-12-06 23:10:08,185 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 23:10:08,185 INFO L276 IsEmpty]: Start isEmpty. Operand 2767 states and 4023 transitions. [2021-12-06 23:10:08,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-06 23:10:08,197 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:10:08,198 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:10:08,232 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Ended with exit code 0 [2021-12-06 23:10:08,398 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:10:08,398 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:10:08,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:10:08,399 INFO L85 PathProgramCache]: Analyzing trace with hash 632306147, now seen corresponding path program 1 times [2021-12-06 23:10:08,400 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:10:08,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1339900702] [2021-12-06 23:10:08,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:10:08,401 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:10:08,401 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:10:08,401 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:10:08,402 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-06 23:10:10,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:10:10,525 INFO L263 TraceCheckSpWp]: Trace formula consists of 2496 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:10:10,529 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:10:10,974 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-12-06 23:10:10,974 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:10:10,975 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:10:10,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1339900702] [2021-12-06 23:10:10,975 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1339900702] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:10:10,975 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:10:10,975 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:10:10,975 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1012733288] [2021-12-06 23:10:10,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:10:10,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:10:10,976 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:10:10,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:10:10,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:10:10,976 INFO L87 Difference]: Start difference. First operand 2767 states and 4023 transitions. Second operand has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 23:10:13,257 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:10:13,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:10:13,288 INFO L93 Difference]: Finished difference Result 5314 states and 7742 transitions. [2021-12-06 23:10:13,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:10:13,306 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2021-12-06 23:10:13,306 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:10:13,313 INFO L225 Difference]: With dead ends: 5314 [2021-12-06 23:10:13,313 INFO L226 Difference]: Without dead ends: 2769 [2021-12-06 23:10:13,318 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:10:13,318 INFO L933 BasicCegarLoop]: 1550 mSDtfsCounter, 0 mSDsluCounter, 1545 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 3095 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:10:13,319 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 3095 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 1 Unknown, 0 Unchecked, 2.2s Time] [2021-12-06 23:10:13,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2769 states. [2021-12-06 23:10:13,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2769 to 2769. [2021-12-06 23:10:13,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.4165529786266484) internal successors, (3115), 2211 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:10:13,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4025 transitions. [2021-12-06 23:10:13,395 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4025 transitions. Word has length 200 [2021-12-06 23:10:13,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:10:13,396 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4025 transitions. [2021-12-06 23:10:13,396 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 23:10:13,396 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4025 transitions. [2021-12-06 23:10:13,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-06 23:10:13,401 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:10:13,401 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:10:13,447 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Ended with exit code 0 [2021-12-06 23:10:13,602 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:10:13,603 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:10:13,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:10:13,604 INFO L85 PathProgramCache]: Analyzing trace with hash 1848459873, now seen corresponding path program 1 times [2021-12-06 23:10:13,610 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:10:13,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [997941115] [2021-12-06 23:10:13,611 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:10:13,611 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:10:13,611 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:10:13,613 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:10:13,616 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-06 23:10:15,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:10:16,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 2498 conjuncts, 14 conjunts are in the unsatisfiable core [2021-12-06 23:10:16,030 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:10:16,638 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-12-06 23:10:16,639 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:10:16,639 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:10:16,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [997941115] [2021-12-06 23:10:16,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [997941115] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:10:16,639 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:10:16,639 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:10:16,639 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747114693] [2021-12-06 23:10:16,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:10:16,640 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:10:16,640 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:10:16,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:10:16,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:10:16,641 INFO L87 Difference]: Start difference. First operand 2769 states and 4025 transitions. Second operand has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-06 23:10:20,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:10:20,439 INFO L93 Difference]: Finished difference Result 6947 states and 10330 transitions. [2021-12-06 23:10:20,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:10:20,440 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) Word has length 200 [2021-12-06 23:10:20,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:10:20,452 INFO L225 Difference]: With dead ends: 6947 [2021-12-06 23:10:20,453 INFO L226 Difference]: Without dead ends: 4400 [2021-12-06 23:10:20,459 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 195 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:10:20,465 INFO L933 BasicCegarLoop]: 2463 mSDtfsCounter, 794 mSDsluCounter, 8939 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 929 SdHoareTripleChecker+Valid, 11402 SdHoareTripleChecker+Invalid, 415 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2021-12-06 23:10:20,465 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [929 Valid, 11402 Invalid, 415 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2021-12-06 23:10:20,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4400 states. [2021-12-06 23:10:20,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4400 to 2769. [2021-12-06 23:10:20,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.415643474306503) internal successors, (3113), 2211 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:10:20,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4023 transitions. [2021-12-06 23:10:20,587 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4023 transitions. Word has length 200 [2021-12-06 23:10:20,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:10:20,588 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4023 transitions. [2021-12-06 23:10:20,588 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-06 23:10:20,588 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4023 transitions. [2021-12-06 23:10:20,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-06 23:10:20,595 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:10:20,595 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:10:20,652 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Ended with exit code 0 [2021-12-06 23:10:20,795 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:10:20,796 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:10:20,798 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:10:20,799 INFO L85 PathProgramCache]: Analyzing trace with hash 2050283807, now seen corresponding path program 1 times [2021-12-06 23:10:20,802 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:10:20,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2068872291] [2021-12-06 23:10:20,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:10:20,803 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:10:20,803 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:10:20,805 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:10:20,807 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-06 23:10:23,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:10:23,176 INFO L263 TraceCheckSpWp]: Trace formula consists of 2498 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 23:10:23,180 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:10:23,733 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 23:10:23,733 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:10:23,733 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:10:23,733 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2068872291] [2021-12-06 23:10:23,733 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2068872291] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:10:23,734 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:10:23,734 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:10:23,734 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [312229853] [2021-12-06 23:10:23,734 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:10:23,734 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:10:23,734 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:10:23,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:10:23,735 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:10:23,735 INFO L87 Difference]: Start difference. First operand 2769 states and 4023 transitions. Second operand has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-06 23:10:27,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:10:27,429 INFO L93 Difference]: Finished difference Result 6655 states and 9852 transitions. [2021-12-06 23:10:27,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 23:10:27,430 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) Word has length 200 [2021-12-06 23:10:27,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:10:27,440 INFO L225 Difference]: With dead ends: 6655 [2021-12-06 23:10:27,440 INFO L226 Difference]: Without dead ends: 4108 [2021-12-06 23:10:27,446 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 195 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:10:27,446 INFO L933 BasicCegarLoop]: 2310 mSDtfsCounter, 757 mSDsluCounter, 8315 mSDsCounter, 0 mSdLazyCounter, 363 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 882 SdHoareTripleChecker+Valid, 10625 SdHoareTripleChecker+Invalid, 365 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 363 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:10:27,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [882 Valid, 10625 Invalid, 365 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 363 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2021-12-06 23:10:27,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4108 states. [2021-12-06 23:10:27,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4108 to 2769. [2021-12-06 23:10:27,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.4147339699863575) internal successors, (3111), 2211 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:10:27,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4021 transitions. [2021-12-06 23:10:27,552 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4021 transitions. Word has length 200 [2021-12-06 23:10:27,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:10:27,552 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4021 transitions. [2021-12-06 23:10:27,553 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-06 23:10:27,553 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4021 transitions. [2021-12-06 23:10:27,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-06 23:10:27,557 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:10:27,557 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:10:27,594 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Ended with exit code 0 [2021-12-06 23:10:27,757 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:10:27,758 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:10:27,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:10:27,758 INFO L85 PathProgramCache]: Analyzing trace with hash 21697697, now seen corresponding path program 1 times [2021-12-06 23:10:27,760 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:10:27,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [527808285] [2021-12-06 23:10:27,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:10:27,760 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:10:27,760 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:10:27,761 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:10:27,761 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-06 23:10:30,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:10:30,141 INFO L263 TraceCheckSpWp]: Trace formula consists of 2498 conjuncts, 24 conjunts are in the unsatisfiable core [2021-12-06 23:10:30,144 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:10:31,680 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2021-12-06 23:10:31,680 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:10:31,680 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:10:31,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [527808285] [2021-12-06 23:10:31,680 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [527808285] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:10:31,680 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:10:31,680 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 23:10:31,681 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [227022234] [2021-12-06 23:10:31,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:10:31,681 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 23:10:31,681 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:10:31,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 23:10:31,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:10:31,682 INFO L87 Difference]: Start difference. First operand 2769 states and 4021 transitions. Second operand has 13 states, 13 states have (on average 9.76923076923077) internal successors, (127), 9 states have internal predecessors, (127), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) [2021-12-06 23:10:35,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:10:35,504 INFO L93 Difference]: Finished difference Result 6689 states and 9903 transitions. [2021-12-06 23:10:35,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 23:10:35,506 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 9.76923076923077) internal successors, (127), 9 states have internal predecessors, (127), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) Word has length 200 [2021-12-06 23:10:35,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:10:35,519 INFO L225 Difference]: With dead ends: 6689 [2021-12-06 23:10:35,519 INFO L226 Difference]: Without dead ends: 4142 [2021-12-06 23:10:35,525 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 189 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=39, Invalid=233, Unknown=0, NotChecked=0, Total=272 [2021-12-06 23:10:35,526 INFO L933 BasicCegarLoop]: 2387 mSDtfsCounter, 811 mSDsluCounter, 25292 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 945 SdHoareTripleChecker+Valid, 27679 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:10:35,526 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [945 Valid, 27679 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2021-12-06 23:10:35,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4142 states. [2021-12-06 23:10:35,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4142 to 2773. [2021-12-06 23:10:35,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2773 states, 2203 states have (on average 1.4139809350885157) internal successors, (3115), 2213 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 449 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-06 23:10:35,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2773 states to 2773 states and 4025 transitions. [2021-12-06 23:10:35,647 INFO L78 Accepts]: Start accepts. Automaton has 2773 states and 4025 transitions. Word has length 200 [2021-12-06 23:10:35,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:10:35,648 INFO L470 AbstractCegarLoop]: Abstraction has 2773 states and 4025 transitions. [2021-12-06 23:10:35,648 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 9.76923076923077) internal successors, (127), 9 states have internal predecessors, (127), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) [2021-12-06 23:10:35,648 INFO L276 IsEmpty]: Start isEmpty. Operand 2773 states and 4025 transitions. [2021-12-06 23:10:35,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 203 [2021-12-06 23:10:35,653 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:10:35,653 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:10:35,704 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Ended with exit code 0 [2021-12-06 23:10:35,853 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:10:35,855 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:10:35,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:10:35,856 INFO L85 PathProgramCache]: Analyzing trace with hash -1602293502, now seen corresponding path program 1 times [2021-12-06 23:10:35,859 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:10:35,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [639260893] [2021-12-06 23:10:35,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:10:35,860 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:10:35,860 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:10:35,861 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:10:35,863 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-06 23:10:37,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:10:37,907 INFO L263 TraceCheckSpWp]: Trace formula consists of 2317 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:10:37,910 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:10:38,415 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-12-06 23:10:38,415 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:10:38,415 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:10:38,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [639260893] [2021-12-06 23:10:38,415 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [639260893] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:10:38,415 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:10:38,416 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:10:38,416 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522878420] [2021-12-06 23:10:38,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:10:38,416 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:10:38,416 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:10:38,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:10:38,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:10:38,417 INFO L87 Difference]: Start difference. First operand 2773 states and 4025 transitions. Second operand has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 23:10:39,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:10:39,523 INFO L93 Difference]: Finished difference Result 6607 states and 9776 transitions. [2021-12-06 23:10:39,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:10:39,531 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) Word has length 202 [2021-12-06 23:10:39,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:10:39,537 INFO L225 Difference]: With dead ends: 6607 [2021-12-06 23:10:39,537 INFO L226 Difference]: Without dead ends: 4056 [2021-12-06 23:10:39,541 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 201 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:10:39,542 INFO L933 BasicCegarLoop]: 2304 mSDtfsCounter, 581 mSDsluCounter, 6242 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 682 SdHoareTripleChecker+Valid, 8546 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:10:39,542 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [682 Valid, 8546 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-06 23:10:39,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4056 states. [2021-12-06 23:10:39,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4056 to 2781. [2021-12-06 23:10:39,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2781 states, 2209 states have (on average 1.412856496152105) internal successors, (3121), 2219 states have internal predecessors, (3121), 446 states have call successors, (446), 118 states have call predecessors, (446), 125 states have return successors, (468), 451 states have call predecessors, (468), 445 states have call successors, (468) [2021-12-06 23:10:39,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2781 states to 2781 states and 4035 transitions. [2021-12-06 23:10:39,659 INFO L78 Accepts]: Start accepts. Automaton has 2781 states and 4035 transitions. Word has length 202 [2021-12-06 23:10:39,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:10:39,659 INFO L470 AbstractCegarLoop]: Abstraction has 2781 states and 4035 transitions. [2021-12-06 23:10:39,659 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 23:10:39,660 INFO L276 IsEmpty]: Start isEmpty. Operand 2781 states and 4035 transitions. [2021-12-06 23:10:39,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 227 [2021-12-06 23:10:39,665 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:10:39,665 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:10:39,713 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Ended with exit code 0 [2021-12-06 23:10:39,866 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:10:39,866 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:10:39,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:10:39,867 INFO L85 PathProgramCache]: Analyzing trace with hash 1917943735, now seen corresponding path program 1 times [2021-12-06 23:10:39,868 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:10:39,868 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1025995190] [2021-12-06 23:10:39,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:10:39,868 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:10:39,869 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:10:39,869 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:10:39,870 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0f7ce09-943e-4599-81c6-58be3f944ea6/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process