./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:23:02,821 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:23:02,823 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:23:02,853 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:23:02,854 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:23:02,855 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:23:02,857 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:23:02,859 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:23:02,861 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:23:02,862 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:23:02,864 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:23:02,865 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:23:02,865 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:23:02,867 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:23:02,868 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:23:02,870 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:23:02,871 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:23:02,872 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:23:02,874 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:23:02,876 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:23:02,880 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:23:02,881 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:23:02,882 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:23:02,883 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:23:02,887 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:23:02,888 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:23:02,888 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:23:02,889 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:23:02,890 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:23:02,891 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:23:02,891 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:23:02,892 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:23:02,893 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:23:02,894 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:23:02,895 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:23:02,895 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:23:02,896 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:23:02,896 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:23:02,896 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:23:02,897 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:23:02,898 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:23:02,899 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 23:23:02,922 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:23:02,922 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:23:02,922 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:23:02,922 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:23:02,923 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:23:02,923 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:23:02,924 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:23:02,924 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:23:02,924 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:23:02,925 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:23:02,925 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 23:23:02,925 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:23:02,925 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:23:02,925 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:23:02,925 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:23:02,926 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:23:02,926 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:23:02,926 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:23:02,926 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:23:02,927 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:23:02,927 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:23:02,927 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:23:02,932 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:23:02,933 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:23:02,933 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:23:02,933 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 23:23:02,933 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 23:23:02,933 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:23:02,934 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:23:02,934 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:23:02,934 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:23:02,934 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2021-12-06 23:23:03,106 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:23:03,125 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:23:03,127 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:23:03,128 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:23:03,129 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:23:03,130 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-06 23:23:03,180 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/38c700c89/21d3f8d05ac84372aa874418645fb36f/FLAG9ae50304a [2021-12-06 23:23:03,782 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:23:03,782 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-06 23:23:03,810 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/38c700c89/21d3f8d05ac84372aa874418645fb36f/FLAG9ae50304a [2021-12-06 23:23:04,230 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/38c700c89/21d3f8d05ac84372aa874418645fb36f [2021-12-06 23:23:04,235 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:23:04,237 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:23:04,239 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:23:04,240 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:23:04,244 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:23:04,244 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:23:04" (1/1) ... [2021-12-06 23:23:04,245 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@10efb660 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:04, skipping insertion in model container [2021-12-06 23:23:04,246 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:23:04" (1/1) ... [2021-12-06 23:23:04,252 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:23:04,327 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:23:05,006 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-12-06 23:23:05,333 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:23:05,354 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:23:05,457 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-12-06 23:23:05,558 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:23:05,660 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:23:05,661 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05 WrapperNode [2021-12-06 23:23:05,661 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:23:05,662 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:23:05,662 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:23:05,662 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:23:05,669 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,719 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,808 INFO L137 Inliner]: procedures = 163, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 3081 [2021-12-06 23:23:05,809 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:23:05,809 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:23:05,809 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:23:05,810 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:23:05,817 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,817 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,830 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,831 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,896 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,912 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,928 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,944 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:23:05,945 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:23:05,945 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:23:05,945 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:23:05,946 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (1/1) ... [2021-12-06 23:23:05,952 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:23:05,960 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:23:05,971 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:23:05,973 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:23:06,008 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-12-06 23:23:06,008 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-12-06 23:23:06,008 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2021-12-06 23:23:06,008 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2021-12-06 23:23:06,008 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2021-12-06 23:23:06,008 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2021-12-06 23:23:06,009 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2021-12-06 23:23:06,009 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2021-12-06 23:23:06,009 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-06 23:23:06,009 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2021-12-06 23:23:06,009 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2021-12-06 23:23:06,009 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 23:23:06,009 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 23:23:06,009 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-12-06 23:23:06,010 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-12-06 23:23:06,010 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:23:06,010 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:23:06,010 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 23:23:06,010 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 23:23:06,010 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 23:23:06,010 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-06 23:23:06,010 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-06 23:23:06,010 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 23:23:06,011 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 23:23:06,011 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 23:23:06,011 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 23:23:06,011 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-12-06 23:23:06,011 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-12-06 23:23:06,011 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 23:23:06,011 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 23:23:06,011 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:23:06,011 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:23:06,012 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 23:23:06,012 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 23:23:06,012 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 23:23:06,012 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 23:23:06,012 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-06 23:23:06,012 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-06 23:23:06,012 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-12-06 23:23:06,012 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-12-06 23:23:06,012 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:23:06,013 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:23:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 23:23:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:23:06,013 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:23:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2021-12-06 23:23:06,013 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2021-12-06 23:23:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-12-06 23:23:06,013 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-12-06 23:23:06,013 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2021-12-06 23:23:06,014 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2021-12-06 23:23:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:23:06,014 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:23:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-12-06 23:23:06,014 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-12-06 23:23:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 23:23:06,014 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 23:23:06,014 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:23:06,015 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:23:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:23:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-06 23:23:06,015 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-06 23:23:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-06 23:23:06,015 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-06 23:23:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:23:06,015 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-12-06 23:23:06,015 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-12-06 23:23:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 23:23:06,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 23:23:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:23:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:23:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:23:06,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:23:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-12-06 23:23:06,016 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-12-06 23:23:06,016 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2021-12-06 23:23:06,017 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2021-12-06 23:23:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:23:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-12-06 23:23:06,017 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-12-06 23:23:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-12-06 23:23:06,017 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-12-06 23:23:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:23:06,017 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:23:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2021-12-06 23:23:06,018 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2021-12-06 23:23:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-06 23:23:06,018 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-06 23:23:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 23:23:06,018 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 23:23:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 23:23:06,018 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-12-06 23:23:06,018 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-12-06 23:23:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 23:23:06,019 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 23:23:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-12-06 23:23:06,019 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-12-06 23:23:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-06 23:23:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-06 23:23:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 23:23:06,019 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 23:23:06,019 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:23:06,020 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:23:06,020 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-12-06 23:23:06,020 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-12-06 23:23:06,385 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:23:06,388 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:23:06,687 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:23:07,197 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-06 23:23:10,348 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:23:10,363 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:23:10,364 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-06 23:23:10,367 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:23:10 BoogieIcfgContainer [2021-12-06 23:23:10,367 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:23:10,369 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:23:10,369 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:23:10,372 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:23:10,372 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:23:04" (1/3) ... [2021-12-06 23:23:10,373 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7eeca820 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:23:10, skipping insertion in model container [2021-12-06 23:23:10,373 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:23:05" (2/3) ... [2021-12-06 23:23:10,374 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7eeca820 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:23:10, skipping insertion in model container [2021-12-06 23:23:10,374 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:23:10" (3/3) ... [2021-12-06 23:23:10,375 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-06 23:23:10,380 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:23:10,380 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:23:10,425 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:23:10,429 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:23:10,429 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:23:10,459 INFO L276 IsEmpty]: Start isEmpty. Operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2021-12-06 23:23:10,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-06 23:23:10,467 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:23:10,468 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:23:10,468 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:23:10,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:23:10,472 INFO L85 PathProgramCache]: Analyzing trace with hash -967497407, now seen corresponding path program 1 times [2021-12-06 23:23:10,478 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:23:10,478 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1883990624] [2021-12-06 23:23:10,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:23:10,479 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:23:10,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:10,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:23:10,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:10,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:23:10,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:10,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:23:10,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:10,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:23:10,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:10,861 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:23:10,861 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:23:10,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1883990624] [2021-12-06 23:23:10,862 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1883990624] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:23:10,862 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:23:10,862 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:23:10,864 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692049615] [2021-12-06 23:23:10,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:23:10,867 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:23:10,868 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:23:10,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:23:10,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:23:10,892 INFO L87 Difference]: Start difference. First operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:23:13,181 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:15,205 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:18,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:23:18,260 INFO L93 Difference]: Finished difference Result 2754 states and 4123 transitions. [2021-12-06 23:23:18,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:23:18,262 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2021-12-06 23:23:18,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:23:18,286 INFO L225 Difference]: With dead ends: 2754 [2021-12-06 23:23:18,286 INFO L226 Difference]: Without dead ends: 1880 [2021-12-06 23:23:18,293 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:23:18,296 INFO L933 BasicCegarLoop]: 1336 mSDtfsCounter, 1892 mSDsluCounter, 2187 mSDsCounter, 0 mSdLazyCounter, 1425 mSolverCounterSat, 1010 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2040 SdHoareTripleChecker+Valid, 3523 SdHoareTripleChecker+Invalid, 2437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1010 IncrementalHoareTripleChecker+Valid, 1425 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:23:18,297 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2040 Valid, 3523 Invalid, 2437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1010 Valid, 1425 Invalid, 2 Unknown, 0 Unchecked, 7.1s Time] [2021-12-06 23:23:18,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1880 states. [2021-12-06 23:23:18,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1880 to 1612. [2021-12-06 23:23:18,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1612 states, 1197 states have (on average 1.3751044277360067) internal successors, (1646), 1229 states have internal predecessors, (1646), 332 states have call successors, (332), 83 states have call predecessors, (332), 82 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2021-12-06 23:23:18,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1612 states to 1612 states and 2305 transitions. [2021-12-06 23:23:18,436 INFO L78 Accepts]: Start accepts. Automaton has 1612 states and 2305 transitions. Word has length 44 [2021-12-06 23:23:18,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:23:18,436 INFO L470 AbstractCegarLoop]: Abstraction has 1612 states and 2305 transitions. [2021-12-06 23:23:18,436 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:23:18,437 INFO L276 IsEmpty]: Start isEmpty. Operand 1612 states and 2305 transitions. [2021-12-06 23:23:18,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-06 23:23:18,441 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:23:18,441 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:23:18,442 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 23:23:18,442 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:23:18,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:23:18,442 INFO L85 PathProgramCache]: Analyzing trace with hash -1415687837, now seen corresponding path program 1 times [2021-12-06 23:23:18,442 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:23:18,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1390328693] [2021-12-06 23:23:18,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:23:18,443 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:23:18,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:18,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:23:18,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:18,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:23:18,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:18,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:23:18,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:18,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:23:18,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:18,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:23:18,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:18,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:23:18,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:18,751 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:23:18,751 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:23:18,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1390328693] [2021-12-06 23:23:18,752 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1390328693] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:23:18,752 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:23:18,752 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:23:18,752 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [342973882] [2021-12-06 23:23:18,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:23:18,754 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:23:18,754 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:23:18,754 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:23:18,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:23:18,755 INFO L87 Difference]: Start difference. First operand 1612 states and 2305 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:23:21,022 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:23,045 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:26,018 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:28,046 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:30,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:23:30,341 INFO L93 Difference]: Finished difference Result 5349 states and 7945 transitions. [2021-12-06 23:23:30,341 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:23:30,341 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2021-12-06 23:23:30,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:23:30,363 INFO L225 Difference]: With dead ends: 5349 [2021-12-06 23:23:30,363 INFO L226 Difference]: Without dead ends: 3748 [2021-12-06 23:23:30,369 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:23:30,370 INFO L933 BasicCegarLoop]: 1361 mSDtfsCounter, 1951 mSDsluCounter, 2235 mSDsCounter, 0 mSdLazyCounter, 1430 mSolverCounterSat, 1014 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2080 SdHoareTripleChecker+Valid, 3596 SdHoareTripleChecker+Invalid, 2448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1014 IncrementalHoareTripleChecker+Valid, 1430 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:23:30,370 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2080 Valid, 3596 Invalid, 2448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1014 Valid, 1430 Invalid, 4 Unknown, 0 Unchecked, 11.3s Time] [2021-12-06 23:23:30,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3748 states. [2021-12-06 23:23:30,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3748 to 3286. [2021-12-06 23:23:30,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3286 states, 2434 states have (on average 1.3697617091207888) internal successors, (3334), 2504 states have internal predecessors, (3334), 671 states have call successors, (671), 165 states have call predecessors, (671), 180 states have return successors, (762), 642 states have call predecessors, (762), 666 states have call successors, (762) [2021-12-06 23:23:30,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3286 states to 3286 states and 4767 transitions. [2021-12-06 23:23:30,506 INFO L78 Accepts]: Start accepts. Automaton has 3286 states and 4767 transitions. Word has length 61 [2021-12-06 23:23:30,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:23:30,506 INFO L470 AbstractCegarLoop]: Abstraction has 3286 states and 4767 transitions. [2021-12-06 23:23:30,507 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:23:30,507 INFO L276 IsEmpty]: Start isEmpty. Operand 3286 states and 4767 transitions. [2021-12-06 23:23:30,509 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-12-06 23:23:30,509 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:23:30,509 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:23:30,510 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 23:23:30,510 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:23:30,510 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:23:30,510 INFO L85 PathProgramCache]: Analyzing trace with hash -937016713, now seen corresponding path program 1 times [2021-12-06 23:23:30,510 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:23:30,510 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012438446] [2021-12-06 23:23:30,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:23:30,511 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:23:30,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:30,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:23:30,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:30,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:23:30,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:30,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:23:30,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:30,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:23:30,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:30,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:23:30,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:30,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:23:30,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:30,753 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:23:30,753 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:23:30,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012438446] [2021-12-06 23:23:30,753 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012438446] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:23:30,754 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:23:30,754 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:23:30,754 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1044672397] [2021-12-06 23:23:30,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:23:30,754 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:23:30,754 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:23:30,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:23:30,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:23:30,755 INFO L87 Difference]: Start difference. First operand 3286 states and 4767 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:23:32,955 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:34,986 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:38,722 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:40,760 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:42,216 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:23:42,216 INFO L93 Difference]: Finished difference Result 10731 states and 16197 transitions. [2021-12-06 23:23:42,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:23:42,217 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 62 [2021-12-06 23:23:42,217 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:23:42,268 INFO L225 Difference]: With dead ends: 10731 [2021-12-06 23:23:42,268 INFO L226 Difference]: Without dead ends: 7456 [2021-12-06 23:23:42,279 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:23:42,280 INFO L933 BasicCegarLoop]: 1302 mSDtfsCounter, 2006 mSDsluCounter, 2142 mSDsCounter, 0 mSdLazyCounter, 1398 mSolverCounterSat, 1035 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2144 SdHoareTripleChecker+Valid, 3444 SdHoareTripleChecker+Invalid, 2437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1035 IncrementalHoareTripleChecker+Valid, 1398 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:23:42,281 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2144 Valid, 3444 Invalid, 2437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1035 Valid, 1398 Invalid, 4 Unknown, 0 Unchecked, 11.2s Time] [2021-12-06 23:23:42,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7456 states. [2021-12-06 23:23:42,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7456 to 6627. [2021-12-06 23:23:42,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6627 states, 4901 states have (on average 1.3650275453988983) internal successors, (6690), 5047 states have internal predecessors, (6690), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-12-06 23:23:42,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6627 states to 6627 states and 9741 transitions. [2021-12-06 23:23:42,539 INFO L78 Accepts]: Start accepts. Automaton has 6627 states and 9741 transitions. Word has length 62 [2021-12-06 23:23:42,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:23:42,540 INFO L470 AbstractCegarLoop]: Abstraction has 6627 states and 9741 transitions. [2021-12-06 23:23:42,540 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:23:42,540 INFO L276 IsEmpty]: Start isEmpty. Operand 6627 states and 9741 transitions. [2021-12-06 23:23:42,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-06 23:23:42,542 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:23:42,542 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:23:42,543 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 23:23:42,543 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:23:42,543 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:23:42,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1016891110, now seen corresponding path program 1 times [2021-12-06 23:23:42,543 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:23:42,543 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1090838237] [2021-12-06 23:23:42,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:23:42,544 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:23:42,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:42,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:23:42,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:42,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:23:42,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:42,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:23:42,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:42,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:23:42,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:42,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:23:42,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:42,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:23:42,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:42,763 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:23:42,763 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:23:42,763 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1090838237] [2021-12-06 23:23:42,763 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1090838237] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:23:42,763 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:23:42,764 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:23:42,764 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098052175] [2021-12-06 23:23:42,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:23:42,764 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:23:42,764 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:23:42,764 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:23:42,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:23:42,765 INFO L87 Difference]: Start difference. First operand 6627 states and 9741 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:23:44,955 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:46,996 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:50,630 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:52,663 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:54,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:23:54,038 INFO L93 Difference]: Finished difference Result 7454 states and 11168 transitions. [2021-12-06 23:23:54,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:23:54,038 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 63 [2021-12-06 23:23:54,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:23:54,074 INFO L225 Difference]: With dead ends: 7454 [2021-12-06 23:23:54,074 INFO L226 Difference]: Without dead ends: 7451 [2021-12-06 23:23:54,076 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:23:54,077 INFO L933 BasicCegarLoop]: 1309 mSDtfsCounter, 2003 mSDsluCounter, 2150 mSDsCounter, 0 mSdLazyCounter, 1395 mSolverCounterSat, 1027 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2139 SdHoareTripleChecker+Valid, 3459 SdHoareTripleChecker+Invalid, 2426 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1027 IncrementalHoareTripleChecker+Valid, 1395 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:23:54,077 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2139 Valid, 3459 Invalid, 2426 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1027 Valid, 1395 Invalid, 4 Unknown, 0 Unchecked, 11.1s Time] [2021-12-06 23:23:54,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7451 states. [2021-12-06 23:23:54,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7451 to 6628. [2021-12-06 23:23:54,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6628 states, 4902 states have (on average 1.364953080375357) internal successors, (6691), 5048 states have internal predecessors, (6691), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-12-06 23:23:54,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6628 states to 6628 states and 9742 transitions. [2021-12-06 23:23:54,324 INFO L78 Accepts]: Start accepts. Automaton has 6628 states and 9742 transitions. Word has length 63 [2021-12-06 23:23:54,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:23:54,324 INFO L470 AbstractCegarLoop]: Abstraction has 6628 states and 9742 transitions. [2021-12-06 23:23:54,324 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:23:54,325 INFO L276 IsEmpty]: Start isEmpty. Operand 6628 states and 9742 transitions. [2021-12-06 23:23:54,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-06 23:23:54,326 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:23:54,326 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:23:54,326 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 23:23:54,327 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:23:54,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:23:54,327 INFO L85 PathProgramCache]: Analyzing trace with hash 1458496346, now seen corresponding path program 1 times [2021-12-06 23:23:54,327 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:23:54,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1696898706] [2021-12-06 23:23:54,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:23:54,327 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:23:54,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:54,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:23:54,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:54,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:23:54,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:54,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:23:54,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:54,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:23:54,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:54,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:23:54,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:54,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:23:54,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:23:54,594 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:23:54,595 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:23:54,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1696898706] [2021-12-06 23:23:54,595 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1696898706] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:23:54,595 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:23:54,595 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:23:54,595 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704328999] [2021-12-06 23:23:54,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:23:54,596 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:23:54,596 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:23:54,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:23:54,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:23:54,597 INFO L87 Difference]: Start difference. First operand 6628 states and 9742 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:23:56,778 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:23:58,814 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:01,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:24:01,059 INFO L93 Difference]: Finished difference Result 7450 states and 11164 transitions. [2021-12-06 23:24:01,060 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:24:01,060 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 64 [2021-12-06 23:24:01,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:24:01,092 INFO L225 Difference]: With dead ends: 7450 [2021-12-06 23:24:01,093 INFO L226 Difference]: Without dead ends: 7447 [2021-12-06 23:24:01,095 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:24:01,095 INFO L933 BasicCegarLoop]: 1128 mSDtfsCounter, 1541 mSDsluCounter, 1088 mSDsCounter, 0 mSdLazyCounter, 797 mSolverCounterSat, 573 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1681 SdHoareTripleChecker+Valid, 2216 SdHoareTripleChecker+Invalid, 1372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 573 IncrementalHoareTripleChecker+Valid, 797 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:24:01,096 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1681 Valid, 2216 Invalid, 1372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [573 Valid, 797 Invalid, 2 Unknown, 0 Unchecked, 6.3s Time] [2021-12-06 23:24:01,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7447 states. [2021-12-06 23:24:01,297 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7447 to 6627. [2021-12-06 23:24:01,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6627 states, 4902 states have (on average 1.364749082007344) internal successors, (6690), 5047 states have internal predecessors, (6690), 1348 states have call successors, (1348), 329 states have call predecessors, (1348), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2021-12-06 23:24:01,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6627 states to 6627 states and 9740 transitions. [2021-12-06 23:24:01,342 INFO L78 Accepts]: Start accepts. Automaton has 6627 states and 9740 transitions. Word has length 64 [2021-12-06 23:24:01,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:24:01,343 INFO L470 AbstractCegarLoop]: Abstraction has 6627 states and 9740 transitions. [2021-12-06 23:24:01,343 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:24:01,343 INFO L276 IsEmpty]: Start isEmpty. Operand 6627 states and 9740 transitions. [2021-12-06 23:24:01,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 23:24:01,345 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:24:01,345 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:24:01,345 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 23:24:01,345 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:24:01,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:24:01,346 INFO L85 PathProgramCache]: Analyzing trace with hash -2031605655, now seen corresponding path program 1 times [2021-12-06 23:24:01,346 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:24:01,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [664837715] [2021-12-06 23:24:01,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:01,347 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:24:01,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:01,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:01,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:01,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:24:01,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:01,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:24:01,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:01,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:24:01,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:01,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:24:01,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:01,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:24:01,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:01,575 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:24:01,575 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:24:01,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [664837715] [2021-12-06 23:24:01,576 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [664837715] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:24:01,576 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:24:01,576 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:24:01,576 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556261615] [2021-12-06 23:24:01,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:24:01,577 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:24:01,577 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:24:01,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:24:01,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:24:01,578 INFO L87 Difference]: Start difference. First operand 6627 states and 9740 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:24:03,784 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:05,816 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:07,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:24:07,846 INFO L93 Difference]: Finished difference Result 7449 states and 11162 transitions. [2021-12-06 23:24:07,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:24:07,846 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2021-12-06 23:24:07,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:24:07,881 INFO L225 Difference]: With dead ends: 7449 [2021-12-06 23:24:07,881 INFO L226 Difference]: Without dead ends: 7417 [2021-12-06 23:24:07,886 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:24:07,887 INFO L933 BasicCegarLoop]: 1126 mSDtfsCounter, 1537 mSDsluCounter, 1090 mSDsCounter, 0 mSdLazyCounter, 787 mSolverCounterSat, 572 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1678 SdHoareTripleChecker+Valid, 2216 SdHoareTripleChecker+Invalid, 1361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 572 IncrementalHoareTripleChecker+Valid, 787 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:24:07,887 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1678 Valid, 2216 Invalid, 1361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [572 Valid, 787 Invalid, 2 Unknown, 0 Unchecked, 6.1s Time] [2021-12-06 23:24:07,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7417 states. [2021-12-06 23:24:08,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7417 to 6597. [2021-12-06 23:24:08,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6597 states, 4875 states have (on average 1.3645128205128205) internal successors, (6652), 5019 states have internal predecessors, (6652), 1345 states have call successors, (1345), 329 states have call predecessors, (1345), 376 states have return successors, (1696), 1302 states have call predecessors, (1696), 1342 states have call successors, (1696) [2021-12-06 23:24:08,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6597 states to 6597 states and 9693 transitions. [2021-12-06 23:24:08,120 INFO L78 Accepts]: Start accepts. Automaton has 6597 states and 9693 transitions. Word has length 65 [2021-12-06 23:24:08,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:24:08,120 INFO L470 AbstractCegarLoop]: Abstraction has 6597 states and 9693 transitions. [2021-12-06 23:24:08,121 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:24:08,121 INFO L276 IsEmpty]: Start isEmpty. Operand 6597 states and 9693 transitions. [2021-12-06 23:24:08,125 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-06 23:24:08,125 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:24:08,125 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:24:08,126 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 23:24:08,126 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:24:08,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:24:08,126 INFO L85 PathProgramCache]: Analyzing trace with hash 1428627121, now seen corresponding path program 1 times [2021-12-06 23:24:08,126 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:24:08,126 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687400327] [2021-12-06 23:24:08,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:08,126 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:24:08,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:08,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:24:08,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:24:08,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:24:08,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-06 23:24:08,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:24:08,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:24:08,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 23:24:08,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-06 23:24:08,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:08,334 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 23:24:08,335 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:24:08,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687400327] [2021-12-06 23:24:08,335 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687400327] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:24:08,335 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:24:08,335 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 23:24:08,335 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [162356966] [2021-12-06 23:24:08,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:24:08,336 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 23:24:08,336 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:24:08,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 23:24:08,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:24:08,337 INFO L87 Difference]: Start difference. First operand 6597 states and 9693 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:24:10,568 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:12,607 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:16,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:24:16,137 INFO L93 Difference]: Finished difference Result 20473 states and 30444 transitions. [2021-12-06 23:24:16,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 23:24:16,138 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-12-06 23:24:16,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:24:16,180 INFO L225 Difference]: With dead ends: 20473 [2021-12-06 23:24:16,180 INFO L226 Difference]: Without dead ends: 13887 [2021-12-06 23:24:16,203 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:24:16,204 INFO L933 BasicCegarLoop]: 1519 mSDtfsCounter, 2133 mSDsluCounter, 2534 mSDsCounter, 0 mSdLazyCounter, 1544 mSolverCounterSat, 1594 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2270 SdHoareTripleChecker+Valid, 4053 SdHoareTripleChecker+Invalid, 3140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1594 IncrementalHoareTripleChecker+Valid, 1544 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:24:16,204 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2270 Valid, 4053 Invalid, 3140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1594 Valid, 1544 Invalid, 2 Unknown, 0 Unchecked, 7.4s Time] [2021-12-06 23:24:16,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13887 states. [2021-12-06 23:24:16,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13887 to 12437. [2021-12-06 23:24:16,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12437 states, 9104 states have (on average 1.3474297012302285) internal successors, (12267), 9423 states have internal predecessors, (12267), 2516 states have call successors, (2516), 623 states have call predecessors, (2516), 816 states have return successors, (3667), 2490 states have call predecessors, (3667), 2513 states have call successors, (3667) [2021-12-06 23:24:16,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12437 states to 12437 states and 18450 transitions. [2021-12-06 23:24:16,822 INFO L78 Accepts]: Start accepts. Automaton has 12437 states and 18450 transitions. Word has length 98 [2021-12-06 23:24:16,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:24:16,822 INFO L470 AbstractCegarLoop]: Abstraction has 12437 states and 18450 transitions. [2021-12-06 23:24:16,822 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:24:16,822 INFO L276 IsEmpty]: Start isEmpty. Operand 12437 states and 18450 transitions. [2021-12-06 23:24:16,845 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-12-06 23:24:16,845 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:24:16,845 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:24:16,845 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 23:24:16,845 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:24:16,845 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:24:16,846 INFO L85 PathProgramCache]: Analyzing trace with hash -173781947, now seen corresponding path program 1 times [2021-12-06 23:24:16,846 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:24:16,846 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [309548898] [2021-12-06 23:24:16,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:16,846 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:24:16,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:17,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:24:17,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:24:17,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:24:17,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:24:17,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:24:17,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-06 23:24:17,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:24:17,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 23:24:17,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:24:17,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:24:17,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:17,216 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2021-12-06 23:24:17,217 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:24:17,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [309548898] [2021-12-06 23:24:17,217 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [309548898] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:24:17,217 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:24:17,217 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 23:24:17,217 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2061337095] [2021-12-06 23:24:17,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:24:17,218 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 23:24:17,218 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:24:17,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 23:24:17,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:24:17,218 INFO L87 Difference]: Start difference. First operand 12437 states and 18450 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-06 23:24:19,487 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:21,526 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:23,557 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:27,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:24:27,257 INFO L93 Difference]: Finished difference Result 26283 states and 39189 transitions. [2021-12-06 23:24:27,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 23:24:27,258 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) Word has length 124 [2021-12-06 23:24:27,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:24:27,301 INFO L225 Difference]: With dead ends: 26283 [2021-12-06 23:24:27,302 INFO L226 Difference]: Without dead ends: 13868 [2021-12-06 23:24:27,337 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2021-12-06 23:24:27,337 INFO L933 BasicCegarLoop]: 1148 mSDtfsCounter, 680 mSDsluCounter, 5544 mSDsCounter, 0 mSdLazyCounter, 2148 mSolverCounterSat, 700 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 705 SdHoareTripleChecker+Valid, 6692 SdHoareTripleChecker+Invalid, 2851 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 700 IncrementalHoareTripleChecker+Valid, 2148 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.5s IncrementalHoareTripleChecker+Time [2021-12-06 23:24:27,338 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [705 Valid, 6692 Invalid, 2851 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [700 Valid, 2148 Invalid, 3 Unknown, 0 Unchecked, 9.5s Time] [2021-12-06 23:24:27,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13868 states. [2021-12-06 23:24:27,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13868 to 12457. [2021-12-06 23:24:27,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12457 states, 9120 states have (on average 1.3468201754385964) internal successors, (12283), 9435 states have internal predecessors, (12283), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2021-12-06 23:24:27,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12457 states to 12457 states and 18474 transitions. [2021-12-06 23:24:27,924 INFO L78 Accepts]: Start accepts. Automaton has 12457 states and 18474 transitions. Word has length 124 [2021-12-06 23:24:27,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:24:27,924 INFO L470 AbstractCegarLoop]: Abstraction has 12457 states and 18474 transitions. [2021-12-06 23:24:27,924 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-06 23:24:27,925 INFO L276 IsEmpty]: Start isEmpty. Operand 12457 states and 18474 transitions. [2021-12-06 23:24:27,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2021-12-06 23:24:27,933 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:24:27,933 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:24:27,933 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 23:24:27,933 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:24:27,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:24:27,933 INFO L85 PathProgramCache]: Analyzing trace with hash 582365067, now seen corresponding path program 1 times [2021-12-06 23:24:27,933 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:24:27,934 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [837306277] [2021-12-06 23:24:27,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:27,934 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:24:28,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:28,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:24:28,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:24:28,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:24:28,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:24:28,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:24:28,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-06 23:24:28,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-06 23:24:28,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-06 23:24:28,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:24:28,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:28,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 23:24:28,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:28,212 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-12-06 23:24:28,212 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:24:28,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [837306277] [2021-12-06 23:24:28,212 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [837306277] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:24:28,212 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:24:28,212 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 23:24:28,212 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834336300] [2021-12-06 23:24:28,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:24:28,213 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 23:24:28,213 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:24:28,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 23:24:28,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:24:28,213 INFO L87 Difference]: Start difference. First operand 12457 states and 18474 transitions. Second operand has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:24:30,555 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:32,597 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:34,629 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:38,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:24:38,099 INFO L93 Difference]: Finished difference Result 26292 states and 39150 transitions. [2021-12-06 23:24:38,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 23:24:38,100 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 130 [2021-12-06 23:24:38,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:24:38,145 INFO L225 Difference]: With dead ends: 26292 [2021-12-06 23:24:38,146 INFO L226 Difference]: Without dead ends: 13838 [2021-12-06 23:24:38,171 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2021-12-06 23:24:38,171 INFO L933 BasicCegarLoop]: 1148 mSDtfsCounter, 678 mSDsluCounter, 4496 mSDsCounter, 0 mSdLazyCounter, 1926 mSolverCounterSat, 705 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 703 SdHoareTripleChecker+Valid, 5644 SdHoareTripleChecker+Invalid, 2634 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 705 IncrementalHoareTripleChecker+Valid, 1926 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:24:38,171 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [703 Valid, 5644 Invalid, 2634 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [705 Valid, 1926 Invalid, 3 Unknown, 0 Unchecked, 9.4s Time] [2021-12-06 23:24:38,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13838 states. [2021-12-06 23:24:38,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13838 to 12466. [2021-12-06 23:24:38,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12466 states, 9129 states have (on average 1.346478256106912) internal successors, (12292), 9444 states have internal predecessors, (12292), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2021-12-06 23:24:38,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12466 states to 12466 states and 18483 transitions. [2021-12-06 23:24:38,641 INFO L78 Accepts]: Start accepts. Automaton has 12466 states and 18483 transitions. Word has length 130 [2021-12-06 23:24:38,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:24:38,641 INFO L470 AbstractCegarLoop]: Abstraction has 12466 states and 18483 transitions. [2021-12-06 23:24:38,642 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:24:38,642 INFO L276 IsEmpty]: Start isEmpty. Operand 12466 states and 18483 transitions. [2021-12-06 23:24:38,676 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2021-12-06 23:24:38,676 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:24:38,677 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:24:38,677 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 23:24:38,677 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:24:38,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:24:38,678 INFO L85 PathProgramCache]: Analyzing trace with hash -413463987, now seen corresponding path program 1 times [2021-12-06 23:24:38,678 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:24:38,678 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1145459613] [2021-12-06 23:24:38,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:38,678 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:24:38,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:38,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:38,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:38,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:24:38,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:38,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:24:38,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:38,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:24:38,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:38,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-06 23:24:38,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 23:24:39,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 23:24:39,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-06 23:24:39,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-06 23:24:39,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:24:39,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:39,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 23:24:39,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,075 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-12-06 23:24:39,076 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:24:39,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1145459613] [2021-12-06 23:24:39,076 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1145459613] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:24:39,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [999795488] [2021-12-06 23:24:39,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:39,076 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:24:39,076 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:24:39,077 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:24:39,078 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 23:24:39,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:39,497 INFO L263 TraceCheckSpWp]: Trace formula consists of 2262 conjuncts, 15 conjunts are in the unsatisfiable core [2021-12-06 23:24:39,507 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:24:39,684 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2021-12-06 23:24:39,685 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:24:39,685 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [999795488] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:24:39,685 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 23:24:39,685 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2021-12-06 23:24:39,685 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1626258680] [2021-12-06 23:24:39,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:24:39,685 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:24:39,686 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:24:39,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:24:39,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2021-12-06 23:24:39,686 INFO L87 Difference]: Start difference. First operand 12466 states and 18483 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:24:40,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:24:40,019 INFO L93 Difference]: Finished difference Result 20320 states and 30035 transitions. [2021-12-06 23:24:40,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:24:40,019 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 131 [2021-12-06 23:24:40,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:24:40,041 INFO L225 Difference]: With dead ends: 20320 [2021-12-06 23:24:40,041 INFO L226 Difference]: Without dead ends: 7867 [2021-12-06 23:24:40,060 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2021-12-06 23:24:40,060 INFO L933 BasicCegarLoop]: 1195 mSDtfsCounter, 38 mSDsluCounter, 3576 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4771 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:24:40,061 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 4771 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:24:40,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7867 states. [2021-12-06 23:24:40,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7867 to 7640. [2021-12-06 23:24:40,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7640 states, 5599 states have (on average 1.342025361671727) internal successors, (7514), 5793 states have internal predecessors, (7514), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1510 states have call predecessors, (2172), 1530 states have call successors, (2172) [2021-12-06 23:24:40,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7640 states to 7640 states and 11219 transitions. [2021-12-06 23:24:40,311 INFO L78 Accepts]: Start accepts. Automaton has 7640 states and 11219 transitions. Word has length 131 [2021-12-06 23:24:40,312 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:24:40,312 INFO L470 AbstractCegarLoop]: Abstraction has 7640 states and 11219 transitions. [2021-12-06 23:24:40,312 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:24:40,312 INFO L276 IsEmpty]: Start isEmpty. Operand 7640 states and 11219 transitions. [2021-12-06 23:24:40,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2021-12-06 23:24:40,317 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:24:40,318 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:24:40,341 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:24:40,518 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-06 23:24:40,519 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:24:40,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:24:40,521 INFO L85 PathProgramCache]: Analyzing trace with hash 1984420258, now seen corresponding path program 1 times [2021-12-06 23:24:40,521 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:24:40,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1404390208] [2021-12-06 23:24:40,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:40,522 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:24:40,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:40,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:24:40,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:24:40,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:24:40,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-06 23:24:40,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:24:40,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 23:24:40,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:24:40,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-06 23:24:40,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 23:24:40,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-06 23:24:40,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-06 23:24:40,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-12-06 23:24:40,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2021-12-06 23:24:40,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:40,832 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2021-12-06 23:24:40,833 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:24:40,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1404390208] [2021-12-06 23:24:40,833 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1404390208] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:24:40,833 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:24:40,833 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 23:24:40,833 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1476696110] [2021-12-06 23:24:40,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:24:40,834 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 23:24:40,834 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:24:40,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 23:24:40,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:24:40,834 INFO L87 Difference]: Start difference. First operand 7640 states and 11219 transitions. Second operand has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-06 23:24:43,016 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:45,060 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:47,094 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:49,420 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:51,466 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:53,503 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:24:59,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:24:59,051 INFO L93 Difference]: Finished difference Result 22101 states and 33866 transitions. [2021-12-06 23:24:59,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:24:59,052 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 135 [2021-12-06 23:24:59,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:24:59,091 INFO L225 Difference]: With dead ends: 22101 [2021-12-06 23:24:59,092 INFO L226 Difference]: Without dead ends: 13897 [2021-12-06 23:24:59,107 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=88, Invalid=218, Unknown=0, NotChecked=0, Total=306 [2021-12-06 23:24:59,107 INFO L933 BasicCegarLoop]: 1631 mSDtfsCounter, 2452 mSDsluCounter, 4055 mSDsCounter, 0 mSdLazyCounter, 2908 mSolverCounterSat, 1784 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2601 SdHoareTripleChecker+Valid, 5686 SdHoareTripleChecker+Invalid, 4698 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1784 IncrementalHoareTripleChecker+Valid, 2908 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.6s IncrementalHoareTripleChecker+Time [2021-12-06 23:24:59,108 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2601 Valid, 5686 Invalid, 4698 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1784 Valid, 2908 Invalid, 6 Unknown, 0 Unchecked, 17.6s Time] [2021-12-06 23:24:59,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13897 states. [2021-12-06 23:24:59,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13897 to 11472. [2021-12-06 23:24:59,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11472 states, 8339 states have (on average 1.337570452092577) internal successors, (11154), 8682 states have internal predecessors, (11154), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2306 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-12-06 23:24:59,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11472 states to 11472 states and 17695 transitions. [2021-12-06 23:24:59,588 INFO L78 Accepts]: Start accepts. Automaton has 11472 states and 17695 transitions. Word has length 135 [2021-12-06 23:24:59,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:24:59,588 INFO L470 AbstractCegarLoop]: Abstraction has 11472 states and 17695 transitions. [2021-12-06 23:24:59,589 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-06 23:24:59,589 INFO L276 IsEmpty]: Start isEmpty. Operand 11472 states and 17695 transitions. [2021-12-06 23:24:59,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2021-12-06 23:24:59,593 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:24:59,593 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:24:59,593 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 23:24:59,593 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:24:59,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:24:59,593 INFO L85 PathProgramCache]: Analyzing trace with hash 2017702408, now seen corresponding path program 1 times [2021-12-06 23:24:59,594 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:24:59,594 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [820977375] [2021-12-06 23:24:59,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:59,594 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:24:59,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:59,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:24:59,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:24:59,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:24:59,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-06 23:24:59,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 23:24:59,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-06 23:24:59,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-06 23:24:59,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-06 23:24:59,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-06 23:24:59,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:24:59,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:24:59,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 23:24:59,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:24:59,935 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-12-06 23:24:59,936 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:24:59,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [820977375] [2021-12-06 23:24:59,936 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [820977375] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:24:59,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1182398170] [2021-12-06 23:24:59,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:24:59,936 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:24:59,936 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:24:59,937 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:24:59,938 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 23:25:00,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:00,557 INFO L263 TraceCheckSpWp]: Trace formula consists of 2337 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 23:25:00,563 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:25:00,827 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2021-12-06 23:25:00,827 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:25:01,088 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-12-06 23:25:01,088 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1182398170] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:25:01,088 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 23:25:01,088 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2021-12-06 23:25:01,088 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041018658] [2021-12-06 23:25:01,089 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 23:25:01,089 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-06 23:25:01,089 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:25:01,090 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-06 23:25:01,090 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=139, Unknown=0, NotChecked=0, Total=182 [2021-12-06 23:25:01,090 INFO L87 Difference]: Start difference. First operand 11472 states and 17695 transitions. Second operand has 14 states, 14 states have (on average 8.571428571428571) internal successors, (120), 10 states have internal predecessors, (120), 2 states have call successors, (32), 6 states have call predecessors, (32), 5 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-12-06 23:25:03,507 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:05,552 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:08,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:25:08,728 INFO L93 Difference]: Finished difference Result 24495 states and 37858 transitions. [2021-12-06 23:25:08,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-12-06 23:25:08,729 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.571428571428571) internal successors, (120), 10 states have internal predecessors, (120), 2 states have call successors, (32), 6 states have call predecessors, (32), 5 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 137 [2021-12-06 23:25:08,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:25:08,770 INFO L225 Difference]: With dead ends: 24495 [2021-12-06 23:25:08,770 INFO L226 Difference]: Without dead ends: 13029 [2021-12-06 23:25:08,794 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 315 GetRequests, 290 SyntacticMatches, 1 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=172, Invalid=478, Unknown=0, NotChecked=0, Total=650 [2021-12-06 23:25:08,795 INFO L933 BasicCegarLoop]: 1135 mSDtfsCounter, 930 mSDsluCounter, 4317 mSDsCounter, 0 mSdLazyCounter, 1541 mSolverCounterSat, 975 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 955 SdHoareTripleChecker+Valid, 5452 SdHoareTripleChecker+Invalid, 2518 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 975 IncrementalHoareTripleChecker+Valid, 1541 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.9s IncrementalHoareTripleChecker+Time [2021-12-06 23:25:08,795 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [955 Valid, 5452 Invalid, 2518 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [975 Valid, 1541 Invalid, 2 Unknown, 0 Unchecked, 6.9s Time] [2021-12-06 23:25:08,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13029 states. [2021-12-06 23:25:09,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13029 to 11483. [2021-12-06 23:25:09,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11483 states, 8350 states have (on average 1.337125748502994) internal successors, (11165), 8693 states have internal predecessors, (11165), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2306 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-12-06 23:25:09,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11483 states to 11483 states and 17706 transitions. [2021-12-06 23:25:09,220 INFO L78 Accepts]: Start accepts. Automaton has 11483 states and 17706 transitions. Word has length 137 [2021-12-06 23:25:09,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:25:09,220 INFO L470 AbstractCegarLoop]: Abstraction has 11483 states and 17706 transitions. [2021-12-06 23:25:09,220 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.571428571428571) internal successors, (120), 10 states have internal predecessors, (120), 2 states have call successors, (32), 6 states have call predecessors, (32), 5 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-12-06 23:25:09,221 INFO L276 IsEmpty]: Start isEmpty. Operand 11483 states and 17706 transitions. [2021-12-06 23:25:09,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2021-12-06 23:25:09,225 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:25:09,225 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:09,249 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 23:25:09,425 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:25:09,426 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:25:09,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:09,427 INFO L85 PathProgramCache]: Analyzing trace with hash -858214074, now seen corresponding path program 2 times [2021-12-06 23:25:09,428 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:09,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1375945597] [2021-12-06 23:25:09,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:09,429 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:09,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:25:09,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:25:09,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:25:09,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:25:09,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-06 23:25:09,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-06 23:25:09,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 23:25:09,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 23:25:09,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2021-12-06 23:25:09,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:09,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-12-06 23:25:09,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:10,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:25:10,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:10,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:25:10,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:10,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 23:25:10,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:10,076 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-12-06 23:25:10,076 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:25:10,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1375945597] [2021-12-06 23:25:10,076 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1375945597] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:25:10,076 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:25:10,076 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2021-12-06 23:25:10,076 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [798182946] [2021-12-06 23:25:10,077 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:25:10,077 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 23:25:10,077 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:25:10,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 23:25:10,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2021-12-06 23:25:10,078 INFO L87 Difference]: Start difference. First operand 11483 states and 17706 transitions. Second operand has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 9 states have internal predecessors, (92), 4 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-12-06 23:25:12,288 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:14,332 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:24,839 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:26,891 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:30,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:25:30,634 INFO L93 Difference]: Finished difference Result 27634 states and 43197 transitions. [2021-12-06 23:25:30,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2021-12-06 23:25:30,635 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 9 states have internal predecessors, (92), 4 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 140 [2021-12-06 23:25:30,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:25:30,688 INFO L225 Difference]: With dead ends: 27634 [2021-12-06 23:25:30,688 INFO L226 Difference]: Without dead ends: 16196 [2021-12-06 23:25:30,734 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 256 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=227, Invalid=1255, Unknown=0, NotChecked=0, Total=1482 [2021-12-06 23:25:30,734 INFO L933 BasicCegarLoop]: 2098 mSDtfsCounter, 3626 mSDsluCounter, 18943 mSDsCounter, 0 mSdLazyCounter, 7857 mSolverCounterSat, 1788 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3880 SdHoareTripleChecker+Valid, 21041 SdHoareTripleChecker+Invalid, 9649 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1788 IncrementalHoareTripleChecker+Valid, 7857 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:25:30,735 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3880 Valid, 21041 Invalid, 9649 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1788 Valid, 7857 Invalid, 4 Unknown, 0 Unchecked, 19.1s Time] [2021-12-06 23:25:30,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16196 states. [2021-12-06 23:25:31,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16196 to 11471. [2021-12-06 23:25:31,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11471 states, 8338 states have (on average 1.3370112736867354) internal successors, (11148), 8682 states have internal predecessors, (11148), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-12-06 23:25:31,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11471 states to 11471 states and 17689 transitions. [2021-12-06 23:25:31,278 INFO L78 Accepts]: Start accepts. Automaton has 11471 states and 17689 transitions. Word has length 140 [2021-12-06 23:25:31,278 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:25:31,278 INFO L470 AbstractCegarLoop]: Abstraction has 11471 states and 17689 transitions. [2021-12-06 23:25:31,279 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 9 states have internal predecessors, (92), 4 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-12-06 23:25:31,279 INFO L276 IsEmpty]: Start isEmpty. Operand 11471 states and 17689 transitions. [2021-12-06 23:25:31,284 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-12-06 23:25:31,284 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:25:31,284 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:31,284 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-06 23:25:31,284 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:25:31,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:31,285 INFO L85 PathProgramCache]: Analyzing trace with hash -892285559, now seen corresponding path program 1 times [2021-12-06 23:25:31,285 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:31,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [27762757] [2021-12-06 23:25:31,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:31,285 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:31,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:25:31,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:25:31,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:25:31,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:25:31,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-06 23:25:31,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-06 23:25:31,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 23:25:31,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-06 23:25:31,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2021-12-06 23:25:31,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-12-06 23:25:31,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:25:31,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:25:31,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 23:25:31,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:25:31,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:25:31,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 23:25:31,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:25:31,561 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-12-06 23:25:31,561 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:25:31,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [27762757] [2021-12-06 23:25:31,562 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [27762757] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:25:31,562 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:25:31,562 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 23:25:31,562 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561814263] [2021-12-06 23:25:31,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:25:31,563 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 23:25:31,563 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:25:31,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 23:25:31,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:25:31,564 INFO L87 Difference]: Start difference. First operand 11471 states and 17689 transitions. Second operand has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-06 23:25:33,694 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:35,740 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:38,592 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:40,894 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:25:43,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:25:43,665 INFO L93 Difference]: Finished difference Result 29877 states and 46898 transitions. [2021-12-06 23:25:43,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 23:25:43,665 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 161 [2021-12-06 23:25:43,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:25:43,711 INFO L225 Difference]: With dead ends: 29877 [2021-12-06 23:25:43,711 INFO L226 Difference]: Without dead ends: 18451 [2021-12-06 23:25:43,732 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2021-12-06 23:25:43,733 INFO L933 BasicCegarLoop]: 1760 mSDtfsCounter, 2005 mSDsluCounter, 4631 mSDsCounter, 0 mSdLazyCounter, 1658 mSolverCounterSat, 1122 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2133 SdHoareTripleChecker+Valid, 6391 SdHoareTripleChecker+Invalid, 2784 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1122 IncrementalHoareTripleChecker+Valid, 1658 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:25:43,733 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2133 Valid, 6391 Invalid, 2784 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1122 Valid, 1658 Invalid, 4 Unknown, 0 Unchecked, 11.3s Time] [2021-12-06 23:25:43,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18451 states. [2021-12-06 23:25:44,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18451 to 11487. [2021-12-06 23:25:44,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11487 states, 8354 states have (on average 1.336365812784295) internal successors, (11164), 8698 states have internal predecessors, (11164), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2021-12-06 23:25:44,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11487 states to 11487 states and 17705 transitions. [2021-12-06 23:25:44,348 INFO L78 Accepts]: Start accepts. Automaton has 11487 states and 17705 transitions. Word has length 161 [2021-12-06 23:25:44,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:25:44,348 INFO L470 AbstractCegarLoop]: Abstraction has 11487 states and 17705 transitions. [2021-12-06 23:25:44,349 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-06 23:25:44,349 INFO L276 IsEmpty]: Start isEmpty. Operand 11487 states and 17705 transitions. [2021-12-06 23:25:44,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2021-12-06 23:25:44,354 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:25:44,354 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:44,355 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-12-06 23:25:44,355 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:25:44,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:25:44,355 INFO L85 PathProgramCache]: Analyzing trace with hash 328420094, now seen corresponding path program 1 times [2021-12-06 23:25:44,355 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:25:44,355 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1166446249] [2021-12-06 23:25:44,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:25:44,355 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:25:44,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:44,761 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:25:44,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:25:45,086 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:25:45,086 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 23:25:45,087 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:25:45,088 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-12-06 23:25:45,090 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:25:45,092 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:25:45,123 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 23:25:45,256 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:25:45 BoogieIcfgContainer [2021-12-06 23:25:45,256 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:25:45,256 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:25:45,256 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:25:45,257 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:25:45,257 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:23:10" (3/4) ... [2021-12-06 23:25:45,259 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 23:25:45,259 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:25:45,259 INFO L158 Benchmark]: Toolchain (without parser) took 161022.60ms. Allocated memory was 132.1MB in the beginning and 650.1MB in the end (delta: 518.0MB). Free memory was 82.7MB in the beginning and 192.6MB in the end (delta: -110.0MB). Peak memory consumption was 411.1MB. Max. memory is 16.1GB. [2021-12-06 23:25:45,260 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 132.1MB. Free memory is still 111.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:25:45,260 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1421.72ms. Allocated memory was 132.1MB in the beginning and 169.9MB in the end (delta: 37.7MB). Free memory was 82.7MB in the beginning and 94.6MB in the end (delta: -12.0MB). Peak memory consumption was 75.2MB. Max. memory is 16.1GB. [2021-12-06 23:25:45,260 INFO L158 Benchmark]: Boogie Procedure Inliner took 146.97ms. Allocated memory is still 169.9MB. Free memory was 94.6MB in the beginning and 76.9MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-06 23:25:45,260 INFO L158 Benchmark]: Boogie Preprocessor took 134.91ms. Allocated memory is still 169.9MB. Free memory was 76.9MB in the beginning and 96.0MB in the end (delta: -19.2MB). Peak memory consumption was 23.0MB. Max. memory is 16.1GB. [2021-12-06 23:25:45,261 INFO L158 Benchmark]: RCFGBuilder took 4422.32ms. Allocated memory was 169.9MB in the beginning and 216.0MB in the end (delta: 46.1MB). Free memory was 96.0MB in the beginning and 104.4MB in the end (delta: -8.4MB). Peak memory consumption was 78.4MB. Max. memory is 16.1GB. [2021-12-06 23:25:45,261 INFO L158 Benchmark]: TraceAbstraction took 154887.10ms. Allocated memory was 216.0MB in the beginning and 650.1MB in the end (delta: 434.1MB). Free memory was 104.4MB in the beginning and 192.6MB in the end (delta: -88.2MB). Peak memory consumption was 449.7MB. Max. memory is 16.1GB. [2021-12-06 23:25:45,261 INFO L158 Benchmark]: Witness Printer took 2.71ms. Allocated memory is still 650.1MB. Free memory is still 192.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:25:45,262 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 132.1MB. Free memory is still 111.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1421.72ms. Allocated memory was 132.1MB in the beginning and 169.9MB in the end (delta: 37.7MB). Free memory was 82.7MB in the beginning and 94.6MB in the end (delta: -12.0MB). Peak memory consumption was 75.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 146.97ms. Allocated memory is still 169.9MB. Free memory was 94.6MB in the beginning and 76.9MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 134.91ms. Allocated memory is still 169.9MB. Free memory was 76.9MB in the beginning and 96.0MB in the end (delta: -19.2MB). Peak memory consumption was 23.0MB. Max. memory is 16.1GB. * RCFGBuilder took 4422.32ms. Allocated memory was 169.9MB in the beginning and 216.0MB in the end (delta: 46.1MB). Free memory was 96.0MB in the beginning and 104.4MB in the end (delta: -8.4MB). Peak memory consumption was 78.4MB. Max. memory is 16.1GB. * TraceAbstraction took 154887.10ms. Allocated memory was 216.0MB in the beginning and 650.1MB in the end (delta: 434.1MB). Free memory was 104.4MB in the beginning and 192.6MB in the end (delta: -88.2MB). Peak memory consumption was 449.7MB. Max. memory is 16.1GB. * Witness Printer took 2.71ms. Allocated memory is still 650.1MB. Free memory is still 192.6MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527, overapproximation of bitwiseAnd at line 8537. Possible FailurePath: [L7077] int LDV_IN_INTERRUPT = 1; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7079] int ldv_state_variable_2 ; [L7080] int ref_cnt ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L7082] int ldv_state_variable_1 ; [L7083] int usb_counter ; [L7084] struct sk_buff *usb_ops_group1 ; [L7085] int ldv_state_variable_0 ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L7170] static struct semaphore add_remove_card_sem ; [L7171] static struct usb_card_rec *usb_card ; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; [L8586] int ldv_retval_0 ; [L8587] int ldv_retval_4 ; [L8588] int ldv_retval_1 ; [L8592] int ldv_retval_3 ; [L8593] int ldv_retval_2 ; [L8989] int INTERF_STATE = 0; [L8990] int SERIAL_STATE = 0; [L8991] void *usb_intfdata = 0; [L8992] struct urb *usb_urb = 0; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8995] int completeFnIntCounter = 0; [L8996] int completeFnBulkCounter = 0; [L8997] void (*completeFnInt)(struct urb * ) ; [L8998] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor.flags=0, descriptor___0={171:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=-2, \result=-2, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=-2, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor.flags=0, descriptor___0={171:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND TRUE tmp != 0L [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, sem={161:0}, sem={161:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={163:0}, ldv_func_arg1={163:0}, ldv_func_arg2={4294967314:4294967299}, ldv_func_arg2={4294967314:4294967299}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor___0={171:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=-3, \result=-3, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=-3, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={170:0}, descriptor___0={171:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND TRUE tmp___0 != 0L [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=-2, tmp___0=-3, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, card->usb_boot_state=167, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result=173, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=173, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=173, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}, value={-18446744073709551615:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, card->rx_cmd.urb={-18446744073709551615:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={4294967304:-208}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, arg={163:0}, arg={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967314:4294967299}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={160:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 857 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 154.7s, OverallIterations: 15, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 141.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 42 mSolverCounterUnknown, 25047 SdHoareTripleChecker+Valid, 134.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 23472 mSDsluCounter, 78184 SdHoareTripleChecker+Invalid, 127.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 58988 mSDsCounter, 13906 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 26832 IncrementalHoareTripleChecker+Invalid, 40780 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 13906 mSolverCounterUnsat, 19196 mSDtfsCounter, 26832 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 838 GetRequests, 671 SyntacticMatches, 1 SemanticMatches, 166 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 457 ImplicationChecksByTransitivity, 2.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=12466occurred in iteration=9, InterpolantAutomatonStates: 144, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.2s AutomataMinimizationTime, 14 MinimizatonAttempts, 24142 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.7s SatisfiabilityAnalysisTime, 3.8s InterpolantComputationTime, 1839 NumberOfCodeBlocks, 1839 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1803 ConstructedInterpolants, 0 QuantifiedInterpolants, 3910 SizeOfPredicates, 7 NumberOfNonLiveVariables, 4599 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 872/876 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 23:25:45,474 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-12-06 23:25:45,487 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:25:46,800 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:25:46,801 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:25:46,823 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:25:46,824 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:25:46,825 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:25:46,826 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:25:46,828 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:25:46,829 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:25:46,830 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:25:46,831 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:25:46,832 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:25:46,832 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:25:46,833 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:25:46,834 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:25:46,835 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:25:46,836 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:25:46,837 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:25:46,838 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:25:46,840 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:25:46,842 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:25:46,843 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:25:46,844 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:25:46,845 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:25:46,848 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:25:46,848 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:25:46,848 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:25:46,849 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:25:46,850 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:25:46,850 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:25:46,851 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:25:46,851 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:25:46,852 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:25:46,853 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:25:46,854 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:25:46,854 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:25:46,854 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:25:46,855 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:25:46,855 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:25:46,856 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:25:46,856 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:25:46,857 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-06 23:25:46,883 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:25:46,883 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:25:46,883 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:25:46,883 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:25:46,884 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:25:46,884 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:25:46,884 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:25:46,885 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:25:46,885 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:25:46,885 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:25:46,885 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:25:46,885 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:25:46,885 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:25:46,885 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:25:46,885 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-06 23:25:46,886 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-06 23:25:46,886 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-06 23:25:46,886 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:25:46,886 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:25:46,886 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:25:46,886 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:25:46,886 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:25:46,886 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:25:46,887 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:25:46,887 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:25:46,887 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:25:46,887 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:25:46,887 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-06 23:25:46,887 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-06 23:25:46,887 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:25:46,887 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:25:46,888 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:25:46,888 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:25:46,888 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-06 23:25:46,888 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2021-12-06 23:25:47,122 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:25:47,142 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:25:47,144 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:25:47,145 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:25:47,146 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:25:47,147 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-06 23:25:47,193 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/ff397f4b8/66081f42bd774dbfb296f37653ddd364/FLAGe53ed20a4 [2021-12-06 23:25:47,835 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:25:47,835 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-06 23:25:47,858 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/ff397f4b8/66081f42bd774dbfb296f37653ddd364/FLAGe53ed20a4 [2021-12-06 23:25:48,218 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/data/ff397f4b8/66081f42bd774dbfb296f37653ddd364 [2021-12-06 23:25:48,227 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:25:48,228 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:25:48,229 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:25:48,229 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:25:48,232 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:25:48,233 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:25:48" (1/1) ... [2021-12-06 23:25:48,234 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@55266cd8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:48, skipping insertion in model container [2021-12-06 23:25:48,234 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:25:48" (1/1) ... [2021-12-06 23:25:48,239 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:25:48,315 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:25:48,967 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-12-06 23:25:49,320 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:25:49,352 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-06 23:25:49,401 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:25:49,494 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-12-06 23:25:49,581 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:25:49,608 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:25:49,729 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2021-12-06 23:25:49,799 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:25:49,923 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:25:49,923 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49 WrapperNode [2021-12-06 23:25:49,923 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:25:49,924 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:25:49,924 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:25:49,924 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:25:49,930 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:49,978 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,072 INFO L137 Inliner]: procedures = 178, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 2976 [2021-12-06 23:25:50,072 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:25:50,073 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:25:50,073 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:25:50,073 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:25:50,079 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,079 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,097 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,098 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,168 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,184 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,201 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,217 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:25:50,218 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:25:50,218 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:25:50,218 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:25:50,219 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (1/1) ... [2021-12-06 23:25:50,224 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:25:50,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:25:50,244 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:25:50,247 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:25:50,282 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-12-06 23:25:50,282 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-12-06 23:25:50,283 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2021-12-06 23:25:50,283 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2021-12-06 23:25:50,283 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2021-12-06 23:25:50,283 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2021-12-06 23:25:50,283 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-06 23:25:50,283 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2021-12-06 23:25:50,283 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2021-12-06 23:25:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2021-12-06 23:25:50,284 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2021-12-06 23:25:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-06 23:25:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-06 23:25:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 23:25:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-06 23:25:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 23:25:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-12-06 23:25:50,285 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-12-06 23:25:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:25:50,285 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:25:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 23:25:50,285 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 23:25:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-06 23:25:50,285 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-06 23:25:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 23:25:50,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 23:25:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 23:25:50,286 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 23:25:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-12-06 23:25:50,286 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-12-06 23:25:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 23:25:50,286 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 23:25:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:25:50,287 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:25:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 23:25:50,287 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 23:25:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 23:25:50,287 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 23:25:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-06 23:25:50,287 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-06 23:25:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-12-06 23:25:50,288 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-12-06 23:25:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:25:50,288 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:25:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:25:50,288 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:25:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2021-12-06 23:25:50,288 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2021-12-06 23:25:50,289 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-06 23:25:50,289 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-12-06 23:25:50,289 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-12-06 23:25:50,289 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-06 23:25:50,289 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-06 23:25:50,289 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-06 23:25:50,289 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2021-12-06 23:25:50,289 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2021-12-06 23:25:50,290 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:25:50,290 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:25:50,290 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-12-06 23:25:50,290 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-12-06 23:25:50,290 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 23:25:50,290 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 23:25:50,290 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:25:50,290 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:25:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:25:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-06 23:25:50,291 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-06 23:25:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-06 23:25:50,291 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-06 23:25:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:25:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-12-06 23:25:50,291 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-12-06 23:25:50,291 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 23:25:50,292 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 23:25:50,292 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:25:50,292 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:25:50,292 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-06 23:25:50,292 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-06 23:25:50,292 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:25:50,292 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:25:50,292 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-06 23:25:50,293 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-12-06 23:25:50,293 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-12-06 23:25:50,293 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2021-12-06 23:25:50,293 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2021-12-06 23:25:50,293 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:25:50,293 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-12-06 23:25:50,293 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-12-06 23:25:50,293 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-12-06 23:25:50,293 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-06 23:25:50,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-06 23:25:50,295 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-06 23:25:50,295 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-06 23:25:50,295 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2021-12-06 23:25:50,295 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2021-12-06 23:25:50,295 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-06 23:25:50,295 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-06 23:25:50,295 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 23:25:50,295 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 23:25:50,296 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-06 23:25:50,296 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-12-06 23:25:50,296 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-12-06 23:25:50,296 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 23:25:50,296 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 23:25:50,296 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-12-06 23:25:50,296 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-12-06 23:25:50,297 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-06 23:25:50,297 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 23:25:50,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 23:25:50,297 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:25:50,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:25:50,297 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-12-06 23:25:50,320 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-12-06 23:25:50,704 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:25:50,706 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:25:51,356 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:25:57,270 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-06 23:26:07,359 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:26:07,373 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:26:07,373 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-06 23:26:07,376 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:26:07 BoogieIcfgContainer [2021-12-06 23:26:07,376 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:26:07,377 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:26:07,377 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:26:07,380 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:26:07,380 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:25:48" (1/3) ... [2021-12-06 23:26:07,380 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3718d9ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:26:07, skipping insertion in model container [2021-12-06 23:26:07,380 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:25:49" (2/3) ... [2021-12-06 23:26:07,381 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3718d9ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:26:07, skipping insertion in model container [2021-12-06 23:26:07,381 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:26:07" (3/3) ... [2021-12-06 23:26:07,382 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-06 23:26:07,386 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:26:07,386 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:26:07,426 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:26:07,431 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:26:07,432 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:26:07,460 INFO L276 IsEmpty]: Start isEmpty. Operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2021-12-06 23:26:07,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-06 23:26:07,469 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:07,469 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:07,470 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:07,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:07,474 INFO L85 PathProgramCache]: Analyzing trace with hash -967497407, now seen corresponding path program 1 times [2021-12-06 23:26:07,486 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:07,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [823780917] [2021-12-06 23:26:07,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:07,487 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:07,487 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:07,488 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:07,490 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-06 23:26:07,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:07,910 INFO L263 TraceCheckSpWp]: Trace formula consists of 741 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 23:26:07,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:08,127 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:26:08,127 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:08,128 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:08,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [823780917] [2021-12-06 23:26:08,129 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [823780917] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:08,129 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:08,129 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:26:08,131 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [492835186] [2021-12-06 23:26:08,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:08,135 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 23:26:08,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:08,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:08,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:08,161 INFO L87 Difference]: Start difference. First operand has 855 states, 631 states have (on average 1.3851030110935023) internal successors, (874), 657 states have internal predecessors, (874), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:26:08,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:08,369 INFO L93 Difference]: Finished difference Result 1708 states and 2504 transitions. [2021-12-06 23:26:08,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:26:08,371 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2021-12-06 23:26:08,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:08,388 INFO L225 Difference]: With dead ends: 1708 [2021-12-06 23:26:08,389 INFO L226 Difference]: Without dead ends: 842 [2021-12-06 23:26:08,396 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:08,398 INFO L933 BasicCegarLoop]: 1217 mSDtfsCounter, 2 mSDsluCounter, 2431 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3648 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:08,399 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 3648 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:26:08,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 842 states. [2021-12-06 23:26:08,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 842 to 842. [2021-12-06 23:26:08,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 842 states, 626 states have (on average 1.3722044728434504) internal successors, (859), 644 states have internal predecessors, (859), 174 states have call successors, (174), 42 states have call predecessors, (174), 41 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2021-12-06 23:26:08,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 842 states to 842 states and 1202 transitions. [2021-12-06 23:26:08,482 INFO L78 Accepts]: Start accepts. Automaton has 842 states and 1202 transitions. Word has length 44 [2021-12-06 23:26:08,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:08,483 INFO L470 AbstractCegarLoop]: Abstraction has 842 states and 1202 transitions. [2021-12-06 23:26:08,483 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:26:08,484 INFO L276 IsEmpty]: Start isEmpty. Operand 842 states and 1202 transitions. [2021-12-06 23:26:08,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-12-06 23:26:08,487 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:08,487 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:08,504 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:26:08,687 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:08,688 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:08,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:08,689 INFO L85 PathProgramCache]: Analyzing trace with hash -1457155709, now seen corresponding path program 1 times [2021-12-06 23:26:08,690 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:08,690 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [386223552] [2021-12-06 23:26:08,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:08,690 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:08,690 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:08,691 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:08,695 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-06 23:26:09,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:09,072 INFO L263 TraceCheckSpWp]: Trace formula consists of 752 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:26:09,075 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:09,299 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:26:09,299 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:26:09,723 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:26:09,723 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:09,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [386223552] [2021-12-06 23:26:09,723 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [386223552] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:26:09,724 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 23:26:09,724 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2021-12-06 23:26:09,724 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324451741] [2021-12-06 23:26:09,724 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 23:26:09,725 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 23:26:09,725 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:09,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 23:26:09,726 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:26:09,726 INFO L87 Difference]: Start difference. First operand 842 states and 1202 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-06 23:26:10,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:10,224 INFO L93 Difference]: Finished difference Result 1685 states and 2407 transitions. [2021-12-06 23:26:10,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 23:26:10,225 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 45 [2021-12-06 23:26:10,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:10,233 INFO L225 Difference]: With dead ends: 1685 [2021-12-06 23:26:10,233 INFO L226 Difference]: Without dead ends: 851 [2021-12-06 23:26:10,236 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=53, Invalid=79, Unknown=0, NotChecked=0, Total=132 [2021-12-06 23:26:10,236 INFO L933 BasicCegarLoop]: 1199 mSDtfsCounter, 9 mSDsluCounter, 3592 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 4791 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:10,237 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 4791 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 23:26:10,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 851 states. [2021-12-06 23:26:10,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 851 to 851. [2021-12-06 23:26:10,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 851 states, 634 states have (on average 1.3722397476340693) internal successors, (870), 652 states have internal predecessors, (870), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2021-12-06 23:26:10,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 851 states to 851 states and 1213 transitions. [2021-12-06 23:26:10,279 INFO L78 Accepts]: Start accepts. Automaton has 851 states and 1213 transitions. Word has length 45 [2021-12-06 23:26:10,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:10,280 INFO L470 AbstractCegarLoop]: Abstraction has 851 states and 1213 transitions. [2021-12-06 23:26:10,280 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-06 23:26:10,280 INFO L276 IsEmpty]: Start isEmpty. Operand 851 states and 1213 transitions. [2021-12-06 23:26:10,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-12-06 23:26:10,283 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:10,283 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:10,301 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-06 23:26:10,484 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:10,484 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:10,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:10,485 INFO L85 PathProgramCache]: Analyzing trace with hash 726542785, now seen corresponding path program 2 times [2021-12-06 23:26:10,487 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:10,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1034226952] [2021-12-06 23:26:10,487 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 23:26:10,487 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:10,488 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:10,489 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:10,493 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-06 23:26:10,901 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 23:26:10,902 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 23:26:10,919 INFO L263 TraceCheckSpWp]: Trace formula consists of 703 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:26:10,921 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:11,046 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-06 23:26:11,046 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:11,046 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:11,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1034226952] [2021-12-06 23:26:11,047 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1034226952] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:11,047 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:11,047 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:26:11,047 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [496438143] [2021-12-06 23:26:11,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:11,047 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:11,047 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:11,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:11,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:11,048 INFO L87 Difference]: Start difference. First operand 851 states and 1213 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:26:11,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:11,367 INFO L93 Difference]: Finished difference Result 2456 states and 3510 transitions. [2021-12-06 23:26:11,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:11,368 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2021-12-06 23:26:11,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:11,382 INFO L225 Difference]: With dead ends: 2456 [2021-12-06 23:26:11,382 INFO L226 Difference]: Without dead ends: 1624 [2021-12-06 23:26:11,386 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:11,387 INFO L933 BasicCegarLoop]: 1387 mSDtfsCounter, 1122 mSDsluCounter, 1166 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1122 SdHoareTripleChecker+Valid, 2553 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:11,387 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1122 Valid, 2553 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 23:26:11,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1624 states. [2021-12-06 23:26:11,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1624 to 1624. [2021-12-06 23:26:11,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1624 states, 1208 states have (on average 1.3741721854304636) internal successors, (1660), 1240 states have internal predecessors, (1660), 332 states have call successors, (332), 84 states have call predecessors, (332), 83 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2021-12-06 23:26:11,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1624 states to 1624 states and 2319 transitions. [2021-12-06 23:26:11,478 INFO L78 Accepts]: Start accepts. Automaton has 1624 states and 2319 transitions. Word has length 48 [2021-12-06 23:26:11,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:11,479 INFO L470 AbstractCegarLoop]: Abstraction has 1624 states and 2319 transitions. [2021-12-06 23:26:11,479 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 23:26:11,479 INFO L276 IsEmpty]: Start isEmpty. Operand 1624 states and 2319 transitions. [2021-12-06 23:26:11,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 23:26:11,483 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:11,483 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:11,495 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-06 23:26:11,683 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:11,684 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:11,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:11,684 INFO L85 PathProgramCache]: Analyzing trace with hash 11952355, now seen corresponding path program 1 times [2021-12-06 23:26:11,685 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:11,686 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [333523422] [2021-12-06 23:26:11,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:11,686 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:11,686 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:11,687 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:11,687 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-06 23:26:12,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:12,446 INFO L263 TraceCheckSpWp]: Trace formula consists of 1286 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 23:26:12,450 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:12,709 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-06 23:26:12,709 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:12,710 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:12,710 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [333523422] [2021-12-06 23:26:12,710 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [333523422] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:12,710 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:12,710 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:26:12,710 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1137712202] [2021-12-06 23:26:12,710 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:12,710 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:26:12,711 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:12,711 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:26:12,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:26:12,711 INFO L87 Difference]: Start difference. First operand 1624 states and 2319 transitions. Second operand has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-06 23:26:14,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:14,265 INFO L93 Difference]: Finished difference Result 3576 states and 5163 transitions. [2021-12-06 23:26:14,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:26:14,266 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2021-12-06 23:26:14,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:14,286 INFO L225 Difference]: With dead ends: 3576 [2021-12-06 23:26:14,286 INFO L226 Difference]: Without dead ends: 1971 [2021-12-06 23:26:14,294 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:26:14,295 INFO L933 BasicCegarLoop]: 1655 mSDtfsCounter, 451 mSDsluCounter, 6106 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 7761 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:14,296 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [538 Valid, 7761 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2021-12-06 23:26:14,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1971 states. [2021-12-06 23:26:14,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1971 to 1624. [2021-12-06 23:26:14,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1624 states, 1208 states have (on average 1.3733443708609272) internal successors, (1659), 1240 states have internal predecessors, (1659), 332 states have call successors, (332), 84 states have call predecessors, (332), 83 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2021-12-06 23:26:14,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1624 states to 1624 states and 2318 transitions. [2021-12-06 23:26:14,368 INFO L78 Accepts]: Start accepts. Automaton has 1624 states and 2318 transitions. Word has length 65 [2021-12-06 23:26:14,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:14,368 INFO L470 AbstractCegarLoop]: Abstraction has 1624 states and 2318 transitions. [2021-12-06 23:26:14,369 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-06 23:26:14,369 INFO L276 IsEmpty]: Start isEmpty. Operand 1624 states and 2318 transitions. [2021-12-06 23:26:14,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 23:26:14,370 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:14,370 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:14,400 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-06 23:26:14,571 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:14,571 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:14,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:14,571 INFO L85 PathProgramCache]: Analyzing trace with hash 230807073, now seen corresponding path program 1 times [2021-12-06 23:26:14,572 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:14,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1706220952] [2021-12-06 23:26:14,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:14,573 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:14,573 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:14,573 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:14,574 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-06 23:26:15,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:15,412 INFO L263 TraceCheckSpWp]: Trace formula consists of 1286 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 23:26:15,416 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:16,569 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-12-06 23:26:16,570 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:16,570 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:16,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1706220952] [2021-12-06 23:26:16,570 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1706220952] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:16,570 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:16,570 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:16,570 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [744050232] [2021-12-06 23:26:16,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:16,571 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:16,571 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:16,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:16,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:16,571 INFO L87 Difference]: Start difference. First operand 1624 states and 2318 transitions. Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:16,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:16,763 INFO L93 Difference]: Finished difference Result 4833 states and 7038 transitions. [2021-12-06 23:26:16,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:16,765 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2021-12-06 23:26:16,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:16,782 INFO L225 Difference]: With dead ends: 4833 [2021-12-06 23:26:16,782 INFO L226 Difference]: Without dead ends: 3228 [2021-12-06 23:26:16,788 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:16,788 INFO L933 BasicCegarLoop]: 1476 mSDtfsCounter, 1169 mSDsluCounter, 1179 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1169 SdHoareTripleChecker+Valid, 2655 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:16,789 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1169 Valid, 2655 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:26:16,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3228 states. [2021-12-06 23:26:16,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3228 to 3218. [2021-12-06 23:26:16,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3218 states, 2397 states have (on average 1.3725490196078431) internal successors, (3290), 2457 states have internal predecessors, (3290), 655 states have call successors, (655), 166 states have call predecessors, (655), 165 states have return successors, (703), 618 states have call predecessors, (703), 650 states have call successors, (703) [2021-12-06 23:26:16,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3218 states to 3218 states and 4648 transitions. [2021-12-06 23:26:16,905 INFO L78 Accepts]: Start accepts. Automaton has 3218 states and 4648 transitions. Word has length 65 [2021-12-06 23:26:16,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:16,906 INFO L470 AbstractCegarLoop]: Abstraction has 3218 states and 4648 transitions. [2021-12-06 23:26:16,906 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:16,906 INFO L276 IsEmpty]: Start isEmpty. Operand 3218 states and 4648 transitions. [2021-12-06 23:26:16,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-12-06 23:26:16,907 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:16,908 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:16,940 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2021-12-06 23:26:17,108 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:17,108 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:17,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:17,109 INFO L85 PathProgramCache]: Analyzing trace with hash -1435282055, now seen corresponding path program 1 times [2021-12-06 23:26:17,110 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:17,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [697942274] [2021-12-06 23:26:17,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:17,110 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:17,110 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:17,111 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:17,111 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-06 23:26:17,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:18,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 1287 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 23:26:18,004 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:19,115 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-12-06 23:26:19,115 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:19,115 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:19,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [697942274] [2021-12-06 23:26:19,116 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [697942274] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:19,116 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:19,116 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:19,116 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1384027001] [2021-12-06 23:26:19,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:19,117 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:19,117 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:19,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:19,117 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:19,118 INFO L87 Difference]: Start difference. First operand 3218 states and 4648 transitions. Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:19,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:19,413 INFO L93 Difference]: Finished difference Result 9607 states and 14192 transitions. [2021-12-06 23:26:19,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:19,414 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 66 [2021-12-06 23:26:19,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:19,463 INFO L225 Difference]: With dead ends: 9607 [2021-12-06 23:26:19,463 INFO L226 Difference]: Without dead ends: 6408 [2021-12-06 23:26:19,473 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:19,473 INFO L933 BasicCegarLoop]: 1383 mSDtfsCounter, 1159 mSDsluCounter, 1174 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1159 SdHoareTripleChecker+Valid, 2557 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:19,474 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1159 Valid, 2557 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:26:19,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6408 states. [2021-12-06 23:26:19,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6408 to 6399. [2021-12-06 23:26:19,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6399 states, 4768 states have (on average 1.36996644295302) internal successors, (6532), 4884 states have internal predecessors, (6532), 1301 states have call successors, (1301), 330 states have call predecessors, (1301), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2021-12-06 23:26:19,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6399 states to 6399 states and 9346 transitions. [2021-12-06 23:26:19,692 INFO L78 Accepts]: Start accepts. Automaton has 6399 states and 9346 transitions. Word has length 66 [2021-12-06 23:26:19,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:19,693 INFO L470 AbstractCegarLoop]: Abstraction has 6399 states and 9346 transitions. [2021-12-06 23:26:19,693 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:19,693 INFO L276 IsEmpty]: Start isEmpty. Operand 6399 states and 9346 transitions. [2021-12-06 23:26:19,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-12-06 23:26:19,694 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:19,695 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:19,728 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-12-06 23:26:19,895 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:19,896 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:19,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:19,896 INFO L85 PathProgramCache]: Analyzing trace with hash -1544432604, now seen corresponding path program 1 times [2021-12-06 23:26:19,897 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:19,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [103871438] [2021-12-06 23:26:19,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:19,898 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:19,898 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:19,899 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:19,902 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-06 23:26:20,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:20,923 INFO L263 TraceCheckSpWp]: Trace formula consists of 1288 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:26:20,925 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:21,474 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-12-06 23:26:21,475 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:21,475 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:21,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [103871438] [2021-12-06 23:26:21,475 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [103871438] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:21,475 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:21,475 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:21,475 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738808816] [2021-12-06 23:26:21,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:21,476 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:21,476 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:21,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:21,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:21,476 INFO L87 Difference]: Start difference. First operand 6399 states and 9346 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:21,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:21,639 INFO L93 Difference]: Finished difference Result 6406 states and 9352 transitions. [2021-12-06 23:26:21,640 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:21,640 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 67 [2021-12-06 23:26:21,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:21,670 INFO L225 Difference]: With dead ends: 6406 [2021-12-06 23:26:21,670 INFO L226 Difference]: Without dead ends: 6403 [2021-12-06 23:26:21,672 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:21,672 INFO L933 BasicCegarLoop]: 1385 mSDtfsCounter, 1156 mSDsluCounter, 1173 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1156 SdHoareTripleChecker+Valid, 2558 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:21,673 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1156 Valid, 2558 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:26:21,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6403 states. [2021-12-06 23:26:21,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6403 to 6400. [2021-12-06 23:26:21,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6400 states, 4769 states have (on average 1.3698888655902706) internal successors, (6533), 4885 states have internal predecessors, (6533), 1301 states have call successors, (1301), 330 states have call predecessors, (1301), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2021-12-06 23:26:21,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6400 states to 6400 states and 9347 transitions. [2021-12-06 23:26:21,893 INFO L78 Accepts]: Start accepts. Automaton has 6400 states and 9347 transitions. Word has length 67 [2021-12-06 23:26:21,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:21,894 INFO L470 AbstractCegarLoop]: Abstraction has 6400 states and 9347 transitions. [2021-12-06 23:26:21,894 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:21,894 INFO L276 IsEmpty]: Start isEmpty. Operand 6400 states and 9347 transitions. [2021-12-06 23:26:21,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-12-06 23:26:21,895 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:21,895 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:21,928 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Ended with exit code 0 [2021-12-06 23:26:22,096 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:22,097 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:22,097 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:22,097 INFO L85 PathProgramCache]: Analyzing trace with hash -633127460, now seen corresponding path program 1 times [2021-12-06 23:26:22,098 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:22,098 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [51266247] [2021-12-06 23:26:22,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:22,098 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:22,098 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:22,099 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:22,101 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-06 23:26:22,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:22,976 INFO L263 TraceCheckSpWp]: Trace formula consists of 1289 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:26:22,978 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:23,507 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-12-06 23:26:23,508 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:23,508 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:23,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [51266247] [2021-12-06 23:26:23,508 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [51266247] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:23,508 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:23,508 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:23,508 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [447981272] [2021-12-06 23:26:23,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:23,509 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:23,509 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:23,509 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:23,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:23,509 INFO L87 Difference]: Start difference. First operand 6400 states and 9347 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:23,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:23,656 INFO L93 Difference]: Finished difference Result 6402 states and 9348 transitions. [2021-12-06 23:26:23,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:23,657 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 68 [2021-12-06 23:26:23,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:23,688 INFO L225 Difference]: With dead ends: 6402 [2021-12-06 23:26:23,688 INFO L226 Difference]: Without dead ends: 6399 [2021-12-06 23:26:23,691 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:23,691 INFO L933 BasicCegarLoop]: 1197 mSDtfsCounter, 1145 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1145 SdHoareTripleChecker+Valid, 1197 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:23,692 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1145 Valid, 1197 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:26:23,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6399 states. [2021-12-06 23:26:23,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6399 to 6399. [2021-12-06 23:26:23,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6399 states, 4769 states have (on average 1.369679178024743) internal successors, (6532), 4884 states have internal predecessors, (6532), 1300 states have call successors, (1300), 330 states have call predecessors, (1300), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2021-12-06 23:26:23,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6399 states to 6399 states and 9345 transitions. [2021-12-06 23:26:23,905 INFO L78 Accepts]: Start accepts. Automaton has 6399 states and 9345 transitions. Word has length 68 [2021-12-06 23:26:23,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:23,905 INFO L470 AbstractCegarLoop]: Abstraction has 6399 states and 9345 transitions. [2021-12-06 23:26:23,905 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:23,906 INFO L276 IsEmpty]: Start isEmpty. Operand 6399 states and 9345 transitions. [2021-12-06 23:26:23,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-06 23:26:23,907 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:23,907 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:23,939 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-12-06 23:26:24,108 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:24,109 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:24,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:24,110 INFO L85 PathProgramCache]: Analyzing trace with hash 1847533095, now seen corresponding path program 1 times [2021-12-06 23:26:24,113 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:24,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [152190702] [2021-12-06 23:26:24,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:24,114 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:24,114 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:24,116 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:24,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-06 23:26:24,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:25,055 INFO L263 TraceCheckSpWp]: Trace formula consists of 1290 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:26:25,057 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:25,576 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-12-06 23:26:25,577 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:25,577 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:25,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [152190702] [2021-12-06 23:26:25,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [152190702] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:25,577 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:25,577 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:26:25,577 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [482701699] [2021-12-06 23:26:25,577 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:25,578 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:25,578 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:25,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:25,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:25,578 INFO L87 Difference]: Start difference. First operand 6399 states and 9345 transitions. Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:25,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:25,711 INFO L93 Difference]: Finished difference Result 6401 states and 9346 transitions. [2021-12-06 23:26:25,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:25,712 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 69 [2021-12-06 23:26:25,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:25,733 INFO L225 Difference]: With dead ends: 6401 [2021-12-06 23:26:25,733 INFO L226 Difference]: Without dead ends: 6369 [2021-12-06 23:26:25,736 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:25,737 INFO L933 BasicCegarLoop]: 1196 mSDtfsCounter, 1142 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1142 SdHoareTripleChecker+Valid, 1196 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:25,737 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1142 Valid, 1196 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:26:25,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6369 states. [2021-12-06 23:26:25,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6369 to 6369. [2021-12-06 23:26:25,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6369 states, 4742 states have (on average 1.3694643610291017) internal successors, (6494), 4856 states have internal predecessors, (6494), 1297 states have call successors, (1297), 330 states have call predecessors, (1297), 329 states have return successors, (1508), 1230 states have call predecessors, (1508), 1294 states have call successors, (1508) [2021-12-06 23:26:25,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6369 states to 6369 states and 9299 transitions. [2021-12-06 23:26:25,945 INFO L78 Accepts]: Start accepts. Automaton has 6369 states and 9299 transitions. Word has length 69 [2021-12-06 23:26:25,945 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:25,945 INFO L470 AbstractCegarLoop]: Abstraction has 6369 states and 9299 transitions. [2021-12-06 23:26:25,946 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2021-12-06 23:26:25,946 INFO L276 IsEmpty]: Start isEmpty. Operand 6369 states and 9299 transitions. [2021-12-06 23:26:25,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2021-12-06 23:26:25,950 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:25,950 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:25,973 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Ended with exit code 0 [2021-12-06 23:26:26,150 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:26,151 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:26,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:26,151 INFO L85 PathProgramCache]: Analyzing trace with hash 1553347695, now seen corresponding path program 1 times [2021-12-06 23:26:26,152 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:26,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [237054253] [2021-12-06 23:26:26,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:26,152 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:26,153 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:26,153 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:26,158 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-06 23:26:26,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:26,926 INFO L263 TraceCheckSpWp]: Trace formula consists of 1405 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:26:26,928 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:27,235 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-06 23:26:27,235 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:27,235 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:27,235 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [237054253] [2021-12-06 23:26:27,235 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [237054253] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:27,235 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:27,236 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:26:27,236 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1910382573] [2021-12-06 23:26:27,236 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:27,236 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:27,236 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:27,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:27,237 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:27,237 INFO L87 Difference]: Start difference. First operand 6369 states and 9299 transitions. Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:26:28,515 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 23:26:28,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:28,823 INFO L93 Difference]: Finished difference Result 17378 states and 25193 transitions. [2021-12-06 23:26:28,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:28,823 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 102 [2021-12-06 23:26:28,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:28,853 INFO L225 Difference]: With dead ends: 17378 [2021-12-06 23:26:28,853 INFO L226 Difference]: Without dead ends: 11026 [2021-12-06 23:26:28,868 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:28,869 INFO L933 BasicCegarLoop]: 1603 mSDtfsCounter, 872 mSDsluCounter, 1149 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 872 SdHoareTripleChecker+Valid, 2752 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:28,869 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [872 Valid, 2752 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-06 23:26:28,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11026 states. [2021-12-06 23:26:29,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11026 to 10995. [2021-12-06 23:26:29,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10995 states, 8148 states have (on average 1.359720176730486) internal successors, (11079), 8361 states have internal predecessors, (11079), 2224 states have call successors, (2224), 623 states have call predecessors, (2224), 622 states have return successors, (2573), 2098 states have call predecessors, (2573), 2221 states have call successors, (2573) [2021-12-06 23:26:29,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10995 states to 10995 states and 15876 transitions. [2021-12-06 23:26:29,265 INFO L78 Accepts]: Start accepts. Automaton has 10995 states and 15876 transitions. Word has length 102 [2021-12-06 23:26:29,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:29,266 INFO L470 AbstractCegarLoop]: Abstraction has 10995 states and 15876 transitions. [2021-12-06 23:26:29,266 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:26:29,266 INFO L276 IsEmpty]: Start isEmpty. Operand 10995 states and 15876 transitions. [2021-12-06 23:26:29,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2021-12-06 23:26:29,272 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:29,272 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:29,294 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Ended with exit code 0 [2021-12-06 23:26:29,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:29,473 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:29,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:29,473 INFO L85 PathProgramCache]: Analyzing trace with hash -1390336057, now seen corresponding path program 1 times [2021-12-06 23:26:29,474 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:29,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [143500163] [2021-12-06 23:26:29,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:29,475 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:29,475 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:29,475 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:29,476 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-06 23:26:30,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:30,467 INFO L263 TraceCheckSpWp]: Trace formula consists of 1474 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:26:30,469 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:30,907 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-12-06 23:26:30,907 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:30,907 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:30,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [143500163] [2021-12-06 23:26:30,907 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [143500163] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:30,907 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:30,907 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:30,908 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1598889618] [2021-12-06 23:26:30,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:30,908 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:26:30,908 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:30,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:26:30,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:30,909 INFO L87 Difference]: Start difference. First operand 10995 states and 15876 transitions. Second operand has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-06 23:26:31,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:31,829 INFO L93 Difference]: Finished difference Result 17890 states and 25738 transitions. [2021-12-06 23:26:31,830 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:26:31,830 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 128 [2021-12-06 23:26:31,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:31,849 INFO L225 Difference]: With dead ends: 17890 [2021-12-06 23:26:31,849 INFO L226 Difference]: Without dead ends: 6911 [2021-12-06 23:26:31,875 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:26:31,875 INFO L933 BasicCegarLoop]: 1194 mSDtfsCounter, 38 mSDsluCounter, 3573 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4767 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:31,876 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 4767 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-06 23:26:31,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6911 states. [2021-12-06 23:26:32,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6911 to 6795. [2021-12-06 23:26:32,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6795 states, 5036 states have (on average 1.3534551231135823) internal successors, (6816), 5171 states have internal predecessors, (6816), 1362 states have call successors, (1362), 397 states have call predecessors, (1362), 396 states have return successors, (1549), 1280 states have call predecessors, (1549), 1359 states have call successors, (1549) [2021-12-06 23:26:32,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6795 states to 6795 states and 9727 transitions. [2021-12-06 23:26:32,133 INFO L78 Accepts]: Start accepts. Automaton has 6795 states and 9727 transitions. Word has length 128 [2021-12-06 23:26:32,133 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:32,133 INFO L470 AbstractCegarLoop]: Abstraction has 6795 states and 9727 transitions. [2021-12-06 23:26:32,133 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-06 23:26:32,133 INFO L276 IsEmpty]: Start isEmpty. Operand 6795 states and 9727 transitions. [2021-12-06 23:26:32,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-12-06 23:26:32,139 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:32,139 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:32,164 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-12-06 23:26:32,340 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:32,340 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:32,340 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:32,340 INFO L85 PathProgramCache]: Analyzing trace with hash -1851619390, now seen corresponding path program 1 times [2021-12-06 23:26:32,341 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:32,341 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1697408098] [2021-12-06 23:26:32,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:32,342 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:32,342 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:32,342 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:32,343 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-06 23:26:33,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:33,429 INFO L263 TraceCheckSpWp]: Trace formula consists of 1531 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 23:26:33,433 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:33,901 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2021-12-06 23:26:33,901 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:33,901 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:33,901 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1697408098] [2021-12-06 23:26:33,901 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1697408098] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:33,902 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:33,902 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:26:33,902 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265383217] [2021-12-06 23:26:33,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:33,902 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:26:33,902 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:33,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:26:33,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:26:33,903 INFO L87 Difference]: Start difference. First operand 6795 states and 9727 transitions. Second operand has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-06 23:26:36,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:36,071 INFO L93 Difference]: Finished difference Result 12476 states and 17885 transitions. [2021-12-06 23:26:36,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:26:36,072 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 134 [2021-12-06 23:26:36,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:36,094 INFO L225 Difference]: With dead ends: 12476 [2021-12-06 23:26:36,094 INFO L226 Difference]: Without dead ends: 6809 [2021-12-06 23:26:36,105 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:26:36,106 INFO L933 BasicCegarLoop]: 1444 mSDtfsCounter, 435 mSDsluCounter, 5234 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 520 SdHoareTripleChecker+Valid, 6678 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:36,106 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [520 Valid, 6678 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2021-12-06 23:26:36,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6809 states. [2021-12-06 23:26:36,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6809 to 6795. [2021-12-06 23:26:36,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6795 states, 5036 states have (on average 1.3526608419380461) internal successors, (6812), 5171 states have internal predecessors, (6812), 1362 states have call successors, (1362), 397 states have call predecessors, (1362), 396 states have return successors, (1549), 1280 states have call predecessors, (1549), 1359 states have call successors, (1549) [2021-12-06 23:26:36,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6795 states to 6795 states and 9723 transitions. [2021-12-06 23:26:36,353 INFO L78 Accepts]: Start accepts. Automaton has 6795 states and 9723 transitions. Word has length 134 [2021-12-06 23:26:36,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:36,353 INFO L470 AbstractCegarLoop]: Abstraction has 6795 states and 9723 transitions. [2021-12-06 23:26:36,354 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-06 23:26:36,354 INFO L276 IsEmpty]: Start isEmpty. Operand 6795 states and 9723 transitions. [2021-12-06 23:26:36,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-12-06 23:26:36,358 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:36,358 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:36,390 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Ended with exit code 0 [2021-12-06 23:26:36,559 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:36,559 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:36,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:36,560 INFO L85 PathProgramCache]: Analyzing trace with hash -1774718592, now seen corresponding path program 1 times [2021-12-06 23:26:36,561 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:36,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2075696874] [2021-12-06 23:26:36,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:36,561 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:36,561 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:36,562 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:36,563 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-06 23:26:37,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:37,784 INFO L263 TraceCheckSpWp]: Trace formula consists of 1531 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 23:26:37,787 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:38,178 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-12-06 23:26:38,178 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:38,178 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:38,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2075696874] [2021-12-06 23:26:38,178 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2075696874] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:38,178 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:38,178 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:26:38,178 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1430443194] [2021-12-06 23:26:38,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:38,179 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:26:38,179 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:38,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:26:38,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:38,179 INFO L87 Difference]: Start difference. First operand 6795 states and 9723 transitions. Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:26:38,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:38,462 INFO L93 Difference]: Finished difference Result 12514 states and 18007 transitions. [2021-12-06 23:26:38,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:26:38,463 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) Word has length 134 [2021-12-06 23:26:38,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:38,484 INFO L225 Difference]: With dead ends: 12514 [2021-12-06 23:26:38,484 INFO L226 Difference]: Without dead ends: 6847 [2021-12-06 23:26:38,495 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:38,495 INFO L933 BasicCegarLoop]: 1202 mSDtfsCounter, 4 mSDsluCounter, 3592 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 4794 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:38,495 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4 Valid, 4794 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:26:38,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6847 states. [2021-12-06 23:26:38,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6847 to 6829. [2021-12-06 23:26:38,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6829 states, 5060 states have (on average 1.3517786561264822) internal successors, (6840), 5197 states have internal predecessors, (6840), 1366 states have call successors, (1366), 397 states have call predecessors, (1366), 402 states have return successors, (1589), 1288 states have call predecessors, (1589), 1363 states have call successors, (1589) [2021-12-06 23:26:38,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6829 states to 6829 states and 9795 transitions. [2021-12-06 23:26:38,741 INFO L78 Accepts]: Start accepts. Automaton has 6829 states and 9795 transitions. Word has length 134 [2021-12-06 23:26:38,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:38,742 INFO L470 AbstractCegarLoop]: Abstraction has 6829 states and 9795 transitions. [2021-12-06 23:26:38,742 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:26:38,742 INFO L276 IsEmpty]: Start isEmpty. Operand 6829 states and 9795 transitions. [2021-12-06 23:26:38,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2021-12-06 23:26:38,747 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:38,747 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:38,783 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Ended with exit code 0 [2021-12-06 23:26:38,948 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:38,948 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:38,949 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:38,949 INFO L85 PathProgramCache]: Analyzing trace with hash -1437416734, now seen corresponding path program 1 times [2021-12-06 23:26:38,951 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:38,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [995837507] [2021-12-06 23:26:38,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:38,952 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:38,952 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:38,953 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:38,954 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-06 23:26:39,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:39,951 INFO L263 TraceCheckSpWp]: Trace formula consists of 1675 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:26:39,953 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:40,425 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2021-12-06 23:26:40,425 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:40,425 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:40,425 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [995837507] [2021-12-06 23:26:40,426 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [995837507] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:40,426 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:40,426 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:26:40,426 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1036278881] [2021-12-06 23:26:40,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:40,426 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:26:40,426 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:40,427 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:26:40,427 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:40,427 INFO L87 Difference]: Start difference. First operand 6829 states and 9795 transitions. Second operand has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-06 23:26:40,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:40,869 INFO L93 Difference]: Finished difference Result 16616 states and 23824 transitions. [2021-12-06 23:26:40,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:26:40,870 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 138 [2021-12-06 23:26:40,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:40,895 INFO L225 Difference]: With dead ends: 16616 [2021-12-06 23:26:40,895 INFO L226 Difference]: Without dead ends: 9427 [2021-12-06 23:26:40,906 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 137 GetRequests, 136 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:26:40,906 INFO L933 BasicCegarLoop]: 1748 mSDtfsCounter, 897 mSDsluCounter, 1154 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 2902 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:40,907 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [897 Valid, 2902 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 23:26:40,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9427 states. [2021-12-06 23:26:41,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9427 to 9304. [2021-12-06 23:26:41,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9304 states, 6922 states have (on average 1.3550996821727825) internal successors, (9380), 7116 states have internal predecessors, (9380), 1814 states have call successors, (1814), 556 states have call predecessors, (1814), 567 states have return successors, (2172), 1693 states have call predecessors, (2172), 1811 states have call successors, (2172) [2021-12-06 23:26:41,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9304 states to 9304 states and 13366 transitions. [2021-12-06 23:26:41,249 INFO L78 Accepts]: Start accepts. Automaton has 9304 states and 13366 transitions. Word has length 138 [2021-12-06 23:26:41,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:41,249 INFO L470 AbstractCegarLoop]: Abstraction has 9304 states and 13366 transitions. [2021-12-06 23:26:41,249 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-06 23:26:41,249 INFO L276 IsEmpty]: Start isEmpty. Operand 9304 states and 13366 transitions. [2021-12-06 23:26:41,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2021-12-06 23:26:41,253 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:41,253 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:41,278 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-12-06 23:26:41,454 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:41,455 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:41,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:41,456 INFO L85 PathProgramCache]: Analyzing trace with hash 1581890694, now seen corresponding path program 1 times [2021-12-06 23:26:41,460 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:41,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2013189902] [2021-12-06 23:26:41,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:41,461 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:41,461 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:41,463 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:41,465 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-12-06 23:26:42,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:42,649 INFO L263 TraceCheckSpWp]: Trace formula consists of 1548 conjuncts, 33 conjunts are in the unsatisfiable core [2021-12-06 23:26:42,653 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:43,667 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-12-06 23:26:43,667 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:43,667 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:43,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2013189902] [2021-12-06 23:26:43,667 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2013189902] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:43,668 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:43,668 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-12-06 23:26:43,668 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258374346] [2021-12-06 23:26:43,668 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:43,668 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-06 23:26:43,668 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:43,669 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-06 23:26:43,669 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2021-12-06 23:26:43,669 INFO L87 Difference]: Start difference. First operand 9304 states and 13366 transitions. Second operand has 11 states, 11 states have (on average 8.363636363636363) internal successors, (92), 9 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-12-06 23:26:49,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:49,662 INFO L93 Difference]: Finished difference Result 21756 states and 31871 transitions. [2021-12-06 23:26:49,663 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:26:49,663 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.363636363636363) internal successors, (92), 9 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 140 [2021-12-06 23:26:49,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:49,697 INFO L225 Difference]: With dead ends: 21756 [2021-12-06 23:26:49,697 INFO L226 Difference]: Without dead ends: 12497 [2021-12-06 23:26:49,718 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=67, Invalid=353, Unknown=0, NotChecked=0, Total=420 [2021-12-06 23:26:49,719 INFO L933 BasicCegarLoop]: 2338 mSDtfsCounter, 2563 mSDsluCounter, 20402 mSDsCounter, 0 mSdLazyCounter, 787 mSolverCounterSat, 203 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2648 SdHoareTripleChecker+Valid, 22740 SdHoareTripleChecker+Invalid, 990 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 203 IncrementalHoareTripleChecker+Valid, 787 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:49,719 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2648 Valid, 22740 Invalid, 990 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [203 Valid, 787 Invalid, 0 Unknown, 0 Unchecked, 4.6s Time] [2021-12-06 23:26:49,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12497 states. [2021-12-06 23:26:50,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12497 to 9288. [2021-12-06 23:26:50,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9288 states, 6906 states have (on average 1.3540399652476107) internal successors, (9351), 7101 states have internal predecessors, (9351), 1814 states have call successors, (1814), 556 states have call predecessors, (1814), 567 states have return successors, (2172), 1692 states have call predecessors, (2172), 1811 states have call successors, (2172) [2021-12-06 23:26:50,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9288 states to 9288 states and 13337 transitions. [2021-12-06 23:26:50,093 INFO L78 Accepts]: Start accepts. Automaton has 9288 states and 13337 transitions. Word has length 140 [2021-12-06 23:26:50,093 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:50,093 INFO L470 AbstractCegarLoop]: Abstraction has 9288 states and 13337 transitions. [2021-12-06 23:26:50,093 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.363636363636363) internal successors, (92), 9 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 3 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2021-12-06 23:26:50,093 INFO L276 IsEmpty]: Start isEmpty. Operand 9288 states and 13337 transitions. [2021-12-06 23:26:50,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-12-06 23:26:50,098 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:50,098 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:50,125 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-12-06 23:26:50,299 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:50,300 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:50,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:50,301 INFO L85 PathProgramCache]: Analyzing trace with hash -1703720375, now seen corresponding path program 1 times [2021-12-06 23:26:50,304 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:50,305 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1629958187] [2021-12-06 23:26:50,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:50,305 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:50,306 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:50,308 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:50,310 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-12-06 23:26:51,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:26:51,642 INFO L263 TraceCheckSpWp]: Trace formula consists of 1631 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 23:26:51,644 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:26:51,961 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-12-06 23:26:51,961 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:26:51,962 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:26:51,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1629958187] [2021-12-06 23:26:51,962 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1629958187] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:26:51,962 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:26:51,962 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:26:51,962 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1127771709] [2021-12-06 23:26:51,962 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:26:51,963 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 23:26:51,963 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:26:51,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:26:51,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:26:51,963 INFO L87 Difference]: Start difference. First operand 9288 states and 13337 transitions. Second operand has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 23:26:52,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:26:52,831 INFO L93 Difference]: Finished difference Result 23965 states and 35282 transitions. [2021-12-06 23:26:52,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:26:52,832 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2021-12-06 23:26:52,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:26:52,867 INFO L225 Difference]: With dead ends: 23965 [2021-12-06 23:26:52,867 INFO L226 Difference]: Without dead ends: 14722 [2021-12-06 23:26:52,883 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:26:52,883 INFO L933 BasicCegarLoop]: 1799 mSDtfsCounter, 1094 mSDsluCounter, 2989 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1174 SdHoareTripleChecker+Valid, 4788 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:26:52,883 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1174 Valid, 4788 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 23:26:52,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14722 states. [2021-12-06 23:26:53,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14722 to 9304. [2021-12-06 23:26:53,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9304 states, 6922 states have (on average 1.3532216122507945) internal successors, (9367), 7117 states have internal predecessors, (9367), 1814 states have call successors, (1814), 556 states have call predecessors, (1814), 567 states have return successors, (2172), 1692 states have call predecessors, (2172), 1811 states have call successors, (2172) [2021-12-06 23:26:53,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9304 states to 9304 states and 13353 transitions. [2021-12-06 23:26:53,289 INFO L78 Accepts]: Start accepts. Automaton has 9304 states and 13353 transitions. Word has length 161 [2021-12-06 23:26:53,289 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:26:53,289 INFO L470 AbstractCegarLoop]: Abstraction has 9304 states and 13353 transitions. [2021-12-06 23:26:53,289 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 23:26:53,289 INFO L276 IsEmpty]: Start isEmpty. Operand 9304 states and 13353 transitions. [2021-12-06 23:26:53,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2021-12-06 23:26:53,294 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:26:53,294 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:26:53,330 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Ended with exit code 0 [2021-12-06 23:26:53,495 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:26:53,496 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:26:53,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:26:53,497 INFO L85 PathProgramCache]: Analyzing trace with hash 436590142, now seen corresponding path program 1 times [2021-12-06 23:26:53,501 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:26:53,501 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [692431301] [2021-12-06 23:26:53,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:26:53,502 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:26:53,502 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:26:53,504 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:26:53,506 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-12-06 23:27:36,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:27:36,045 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:28:07,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:28:09,070 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-06 23:28:09,070 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 23:28:09,071 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:28:09,118 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2021-12-06 23:28:09,273 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:28:09,283 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:28:09,294 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:28:09,357 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 23:28:09,550 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:28:09 BoogieIcfgContainer [2021-12-06 23:28:09,550 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:28:09,550 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:28:09,551 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:28:09,551 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:28:09,551 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:26:07" (3/4) ... [2021-12-06 23:28:09,553 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 23:28:09,553 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:28:09,554 INFO L158 Benchmark]: Toolchain (without parser) took 141325.83ms. Allocated memory was 60.8MB in the beginning and 866.1MB in the end (delta: 805.3MB). Free memory was 40.8MB in the beginning and 459.5MB in the end (delta: -418.8MB). Peak memory consumption was 385.8MB. Max. memory is 16.1GB. [2021-12-06 23:28:09,554 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 60.8MB. Free memory is still 42.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:28:09,554 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1694.54ms. Allocated memory was 60.8MB in the beginning and 163.6MB in the end (delta: 102.8MB). Free memory was 40.6MB in the beginning and 106.9MB in the end (delta: -66.4MB). Peak memory consumption was 75.9MB. Max. memory is 16.1GB. [2021-12-06 23:28:09,554 INFO L158 Benchmark]: Boogie Procedure Inliner took 147.79ms. Allocated memory is still 163.6MB. Free memory was 106.9MB in the beginning and 90.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-06 23:28:09,555 INFO L158 Benchmark]: Boogie Preprocessor took 144.87ms. Allocated memory is still 163.6MB. Free memory was 90.1MB in the beginning and 70.2MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-06 23:28:09,555 INFO L158 Benchmark]: RCFGBuilder took 17158.11ms. Allocated memory was 163.6MB in the beginning and 327.2MB in the end (delta: 163.6MB). Free memory was 70.2MB in the beginning and 163.2MB in the end (delta: -93.0MB). Peak memory consumption was 138.6MB. Max. memory is 16.1GB. [2021-12-06 23:28:09,555 INFO L158 Benchmark]: TraceAbstraction took 122172.80ms. Allocated memory was 327.2MB in the beginning and 866.1MB in the end (delta: 539.0MB). Free memory was 162.2MB in the beginning and 459.5MB in the end (delta: -297.3MB). Peak memory consumption was 555.2MB. Max. memory is 16.1GB. [2021-12-06 23:28:09,555 INFO L158 Benchmark]: Witness Printer took 2.77ms. Allocated memory is still 866.1MB. Free memory is still 459.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:28:09,557 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 60.8MB. Free memory is still 42.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1694.54ms. Allocated memory was 60.8MB in the beginning and 163.6MB in the end (delta: 102.8MB). Free memory was 40.6MB in the beginning and 106.9MB in the end (delta: -66.4MB). Peak memory consumption was 75.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 147.79ms. Allocated memory is still 163.6MB. Free memory was 106.9MB in the beginning and 90.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 144.87ms. Allocated memory is still 163.6MB. Free memory was 90.1MB in the beginning and 70.2MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * RCFGBuilder took 17158.11ms. Allocated memory was 163.6MB in the beginning and 327.2MB in the end (delta: 163.6MB). Free memory was 70.2MB in the beginning and 163.2MB in the end (delta: -93.0MB). Peak memory consumption was 138.6MB. Max. memory is 16.1GB. * TraceAbstraction took 122172.80ms. Allocated memory was 327.2MB in the beginning and 866.1MB in the end (delta: 539.0MB). Free memory was 162.2MB in the beginning and 459.5MB in the end (delta: -297.3MB). Peak memory consumption was 555.2MB. Max. memory is 16.1GB. * Witness Printer took 2.77ms. Allocated memory is still 866.1MB. Free memory is still 459.5MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527. Possible FailurePath: [L7077] int LDV_IN_INTERRUPT = 1; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7079] int ldv_state_variable_2 ; [L7080] int ref_cnt ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L7082] int ldv_state_variable_1 ; [L7083] int usb_counter ; [L7084] struct sk_buff *usb_ops_group1 ; [L7085] int ldv_state_variable_0 ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L7170] static struct semaphore add_remove_card_sem ; [L7171] static struct usb_card_rec *usb_card ; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; [L8586] int ldv_retval_0 ; [L8587] int ldv_retval_4 ; [L8588] int ldv_retval_1 ; [L8592] int ldv_retval_3 ; [L8593] int ldv_retval_2 ; [L8989] int INTERF_STATE = 0; [L8990] int SERIAL_STATE = 0; [L8991] void *usb_intfdata = 0; [L8992] struct urb *usb_urb = 0; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8995] int completeFnIntCounter = 0; [L8996] int completeFnBulkCounter = 0; [L8997] void (*completeFnInt)(struct urb * ) ; [L8998] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={-9223372036854775667:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor.flags=0, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor.flags=0, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, sem={161:0}, sem={161:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={163:0}, ldv_func_arg1={163:0}, ldv_func_arg2={165:166}, ldv_func_arg2={165:166}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={-9223372036854775795:0}, descriptor___0={-9223372036854775794:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:0}, card->usb_boot_state=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={200:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={200:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={200:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={200:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, \result={200:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, p={200:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={200:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={200:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={200:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=-2147483648, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={200:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, value={200:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}, value={200:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result={200:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}, value={200:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={200:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={200:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={200:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:0}, card->rx_cmd.urb={200:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:0}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, arg={163:0}, arg={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={-9223372036854775667:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={200:0}, usbdriver_name={160:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 857 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 121.9s, OverallIterations: 17, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 16.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 13595 SdHoareTripleChecker+Valid, 11.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 13258 mSDsluCounter, 78337 SdHoareTripleChecker+Invalid, 10.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 54914 mSDsCounter, 364 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1351 IncrementalHoareTripleChecker+Invalid, 1715 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 364 mSolverCounterUnsat, 23423 mSDtfsCounter, 1351 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1524 GetRequests, 1463 SyntacticMatches, 0 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 2.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10995occurred in iteration=10, InterpolantAutomatonStates: 82, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.5s AutomataMinimizationTime, 16 MinimizatonAttempts, 9298 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.6s SsaConstructionTime, 51.3s SatisfiabilityAnalysisTime, 9.6s InterpolantComputationTime, 1630 NumberOfCodeBlocks, 1614 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1502 ConstructedInterpolants, 0 QuantifiedInterpolants, 2936 SizeOfPredicates, 43 NumberOfNonLiveVariables, 20717 ConjunctsInSsa, 94 ConjunctsInUnsatCore, 17 InterpolantComputations, 15 PerfectInterpolantSequences, 771/773 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 23:28:09,636 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0736e667-1ca4-44e4-b73b-10eb7df03801/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample