./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-18 04:20:27,500 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-18 04:20:27,503 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-18 04:20:27,537 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-18 04:20:27,539 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-18 04:20:27,540 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-18 04:20:27,542 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-18 04:20:27,544 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-18 04:20:27,550 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-18 04:20:27,551 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-18 04:20:27,552 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-18 04:20:27,553 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-18 04:20:27,555 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-18 04:20:27,556 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-18 04:20:27,556 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-18 04:20:27,557 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-18 04:20:27,558 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-18 04:20:27,558 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-18 04:20:27,559 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-18 04:20:27,561 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-18 04:20:27,562 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-18 04:20:27,563 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-18 04:20:27,567 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-18 04:20:27,568 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-18 04:20:27,571 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-18 04:20:27,578 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-18 04:20:27,579 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-18 04:20:27,579 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-18 04:20:27,580 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-18 04:20:27,580 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-18 04:20:27,580 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-18 04:20:27,581 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-18 04:20:27,581 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-18 04:20:27,582 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-18 04:20:27,582 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-18 04:20:27,583 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-18 04:20:27,583 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-18 04:20:27,583 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-18 04:20:27,584 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-18 04:20:27,584 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-18 04:20:27,587 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-18 04:20:27,587 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-18 04:20:27,610 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-18 04:20:27,610 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-18 04:20:27,611 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-18 04:20:27,611 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-18 04:20:27,612 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-18 04:20:27,612 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-18 04:20:27,612 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-18 04:20:27,612 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-18 04:20:27,612 INFO L138 SettingsManager]: * Use SBE=true [2021-12-18 04:20:27,613 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-18 04:20:27,614 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-18 04:20:27,614 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-18 04:20:27,614 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-18 04:20:27,614 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-18 04:20:27,614 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-18 04:20:27,614 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-18 04:20:27,615 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-18 04:20:27,615 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-18 04:20:27,615 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-18 04:20:27,615 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-18 04:20:27,615 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-18 04:20:27,615 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:20:27,615 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-18 04:20:27,616 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-18 04:20:27,616 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-18 04:20:27,616 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-18 04:20:27,616 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-18 04:20:27,616 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-18 04:20:27,616 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-18 04:20:27,617 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-18 04:20:27,617 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-18 04:20:27,617 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-12-18 04:20:27,817 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-18 04:20:27,835 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-18 04:20:27,838 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-18 04:20:27,838 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-18 04:20:27,839 INFO L275 PluginConnector]: CDTParser initialized [2021-12-18 04:20:27,840 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-18 04:20:27,902 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0cfbd5f25/a45ef9606e11480a8c467f64f47b3ccc/FLAG73bb0ea01 [2021-12-18 04:20:28,584 INFO L306 CDTParser]: Found 1 translation units. [2021-12-18 04:20:28,585 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-18 04:20:28,617 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0cfbd5f25/a45ef9606e11480a8c467f64f47b3ccc/FLAG73bb0ea01 [2021-12-18 04:20:28,664 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0cfbd5f25/a45ef9606e11480a8c467f64f47b3ccc [2021-12-18 04:20:28,667 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-18 04:20:28,668 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-18 04:20:28,684 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-18 04:20:28,685 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-18 04:20:28,688 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-18 04:20:28,689 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:20:28" (1/1) ... [2021-12-18 04:20:28,691 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2acb34ce and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:28, skipping insertion in model container [2021-12-18 04:20:28,692 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:20:28" (1/1) ... [2021-12-18 04:20:28,696 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-18 04:20:28,800 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 04:20:29,596 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-18 04:20:30,300 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:20:30,322 INFO L203 MainTranslator]: Completed pre-run [2021-12-18 04:20:30,449 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-18 04:20:30,616 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:20:30,737 INFO L208 MainTranslator]: Completed translation [2021-12-18 04:20:30,739 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30 WrapperNode [2021-12-18 04:20:30,739 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-18 04:20:30,740 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-18 04:20:30,740 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-18 04:20:30,740 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-18 04:20:30,745 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:30,834 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:30,976 INFO L137 Inliner]: procedures = 188, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4876 [2021-12-18 04:20:30,976 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-18 04:20:30,977 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-18 04:20:30,978 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-18 04:20:30,978 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-18 04:20:30,988 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:30,988 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:31,021 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:31,022 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:31,131 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:31,150 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:31,166 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:31,190 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-18 04:20:31,191 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-18 04:20:31,191 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-18 04:20:31,191 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-18 04:20:31,192 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (1/1) ... [2021-12-18 04:20:31,198 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:20:31,204 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 04:20:31,224 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-18 04:20:31,230 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-18 04:20:31,249 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2021-12-18 04:20:31,249 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2021-12-18 04:20:31,249 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:20:31,250 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:20:31,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-18 04:20:31,250 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2021-12-18 04:20:31,250 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2021-12-18 04:20:31,250 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2021-12-18 04:20:31,250 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2021-12-18 04:20:31,250 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-18 04:20:31,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-18 04:20:31,251 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-18 04:20:31,251 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-18 04:20:31,251 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-18 04:20:31,251 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2021-12-18 04:20:31,251 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2021-12-18 04:20:31,251 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2021-12-18 04:20:31,251 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2021-12-18 04:20:31,251 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-18 04:20:31,252 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-18 04:20:31,252 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2021-12-18 04:20:31,252 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2021-12-18 04:20:31,252 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2021-12-18 04:20:31,252 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2021-12-18 04:20:31,252 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-18 04:20:31,252 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-18 04:20:31,252 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-12-18 04:20:31,253 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-12-18 04:20:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-18 04:20:31,253 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-18 04:20:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-18 04:20:31,253 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-18 04:20:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-18 04:20:31,253 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-18 04:20:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-12-18 04:20:31,253 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-12-18 04:20:31,254 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-12-18 04:20:31,254 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-12-18 04:20:31,254 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-18 04:20:31,254 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-12-18 04:20:31,254 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-12-18 04:20:31,254 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-18 04:20:31,255 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-18 04:20:31,255 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2021-12-18 04:20:31,255 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2021-12-18 04:20:31,255 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-18 04:20:31,255 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-18 04:20:31,255 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-18 04:20:31,255 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-18 04:20:31,255 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-18 04:20:31,256 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-18 04:20:31,256 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-12-18 04:20:31,256 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-12-18 04:20:31,256 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-18 04:20:31,256 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-18 04:20:31,257 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-18 04:20:31,257 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2021-12-18 04:20:31,257 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2021-12-18 04:20:31,258 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2021-12-18 04:20:31,258 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2021-12-18 04:20:31,258 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-18 04:20:31,258 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-18 04:20:31,258 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2021-12-18 04:20:31,258 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2021-12-18 04:20:31,259 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2021-12-18 04:20:31,259 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2021-12-18 04:20:31,259 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2021-12-18 04:20:31,259 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2021-12-18 04:20:31,259 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-18 04:20:31,259 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-12-18 04:20:31,259 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-18 04:20:31,259 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-18 04:20:31,260 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-18 04:20:31,260 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2021-12-18 04:20:31,260 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2021-12-18 04:20:31,260 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-18 04:20:31,260 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-18 04:20:31,261 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-18 04:20:31,261 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-18 04:20:31,261 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-18 04:20:31,261 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2021-12-18 04:20:31,261 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2021-12-18 04:20:31,261 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-12-18 04:20:31,261 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-12-18 04:20:31,261 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2021-12-18 04:20:31,262 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2021-12-18 04:20:31,262 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-18 04:20:31,262 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2021-12-18 04:20:31,262 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2021-12-18 04:20:31,262 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2021-12-18 04:20:31,262 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2021-12-18 04:20:31,262 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-18 04:20:31,263 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-18 04:20:31,263 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-18 04:20:31,263 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-18 04:20:31,263 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2021-12-18 04:20:31,264 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2021-12-18 04:20:31,264 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-18 04:20:31,264 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-18 04:20:31,775 INFO L236 CfgBuilder]: Building ICFG [2021-12-18 04:20:31,776 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-18 04:20:31,871 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-18 04:20:38,245 INFO L277 CfgBuilder]: Performing block encoding [2021-12-18 04:20:38,256 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-18 04:20:38,257 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-18 04:20:38,260 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:20:38 BoogieIcfgContainer [2021-12-18 04:20:38,260 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-18 04:20:38,261 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-18 04:20:38,262 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-18 04:20:38,265 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-18 04:20:38,266 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.12 04:20:28" (1/3) ... [2021-12-18 04:20:38,266 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1865cb26 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:20:38, skipping insertion in model container [2021-12-18 04:20:38,266 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:30" (2/3) ... [2021-12-18 04:20:38,267 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1865cb26 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:20:38, skipping insertion in model container [2021-12-18 04:20:38,267 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:20:38" (3/3) ... [2021-12-18 04:20:38,268 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-18 04:20:38,271 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-18 04:20:38,271 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-18 04:20:38,305 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-18 04:20:38,310 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-18 04:20:38,310 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-18 04:20:38,345 INFO L276 IsEmpty]: Start isEmpty. Operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2021-12-18 04:20:38,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-18 04:20:38,360 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:20:38,361 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:20:38,361 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:20:38,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:20:38,369 INFO L85 PathProgramCache]: Analyzing trace with hash -601957003, now seen corresponding path program 1 times [2021-12-18 04:20:38,380 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:20:38,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061414702] [2021-12-18 04:20:38,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:20:38,382 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:20:38,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:38,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:20:38,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:38,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:20:38,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:38,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:20:38,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:38,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:20:38,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:38,888 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-18 04:20:38,888 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:20:38,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061414702] [2021-12-18 04:20:38,889 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061414702] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:20:38,890 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:20:38,890 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-18 04:20:38,891 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1284997437] [2021-12-18 04:20:38,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:20:38,894 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-18 04:20:38,894 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:20:38,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-18 04:20:38,913 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-18 04:20:38,916 INFO L87 Difference]: Start difference. First operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 4 states, 4 states have (on average 7.0) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:20:41,029 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:20:45,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:20:45,695 INFO L93 Difference]: Finished difference Result 3230 states and 4862 transitions. [2021-12-18 04:20:45,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:20:45,700 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.0) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-18 04:20:45,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:20:45,735 INFO L225 Difference]: With dead ends: 3230 [2021-12-18 04:20:45,736 INFO L226 Difference]: Without dead ends: 2148 [2021-12-18 04:20:45,744 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:20:45,748 INFO L933 BasicCegarLoop]: 1811 mSDtfsCounter, 1720 mSDsluCounter, 2295 mSDsCounter, 0 mSdLazyCounter, 836 mSolverCounterSat, 421 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1841 SdHoareTripleChecker+Valid, 4106 SdHoareTripleChecker+Invalid, 1258 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 421 IncrementalHoareTripleChecker+Valid, 836 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.6s IncrementalHoareTripleChecker+Time [2021-12-18 04:20:45,750 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1841 Valid, 4106 Invalid, 1258 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [421 Valid, 836 Invalid, 1 Unknown, 0 Unchecked, 6.6s Time] [2021-12-18 04:20:45,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2148 states. [2021-12-18 04:20:45,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2148 to 2066. [2021-12-18 04:20:45,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2066 states, 1626 states have (on average 1.4317343173431734) internal successors, (2328), 1636 states have internal predecessors, (2328), 363 states have call successors, (363), 77 states have call predecessors, (363), 76 states have return successors, (362), 360 states have call predecessors, (362), 362 states have call successors, (362) [2021-12-18 04:20:45,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2066 states to 2066 states and 3053 transitions. [2021-12-18 04:20:45,928 INFO L78 Accepts]: Start accepts. Automaton has 2066 states and 3053 transitions. Word has length 46 [2021-12-18 04:20:45,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:20:45,929 INFO L470 AbstractCegarLoop]: Abstraction has 2066 states and 3053 transitions. [2021-12-18 04:20:45,929 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.0) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:20:45,929 INFO L276 IsEmpty]: Start isEmpty. Operand 2066 states and 3053 transitions. [2021-12-18 04:20:45,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-18 04:20:45,931 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:20:45,931 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:20:45,932 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-18 04:20:45,932 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:20:45,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:20:45,932 INFO L85 PathProgramCache]: Analyzing trace with hash -1981556391, now seen corresponding path program 1 times [2021-12-18 04:20:45,932 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:20:45,933 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [835551271] [2021-12-18 04:20:45,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:20:45,933 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:20:45,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:46,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:20:46,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:46,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:20:46,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:46,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:20:46,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:46,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:20:46,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:46,132 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-18 04:20:46,132 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:20:46,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [835551271] [2021-12-18 04:20:46,132 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [835551271] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:20:46,133 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:20:46,133 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:20:46,133 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [334266361] [2021-12-18 04:20:46,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:20:46,134 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:20:46,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:20:46,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:20:46,135 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:20:46,136 INFO L87 Difference]: Start difference. First operand 2066 states and 3053 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:20:48,223 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:20:51,036 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:20:54,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:20:54,240 INFO L93 Difference]: Finished difference Result 6335 states and 9421 transitions. [2021-12-18 04:20:54,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 04:20:54,241 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-18 04:20:54,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:20:54,260 INFO L225 Difference]: With dead ends: 6335 [2021-12-18 04:20:54,261 INFO L226 Difference]: Without dead ends: 4271 [2021-12-18 04:20:54,268 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2021-12-18 04:20:54,270 INFO L933 BasicCegarLoop]: 1885 mSDtfsCounter, 1770 mSDsluCounter, 5850 mSDsCounter, 0 mSdLazyCounter, 1240 mSolverCounterSat, 402 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1896 SdHoareTripleChecker+Valid, 7735 SdHoareTripleChecker+Invalid, 1644 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 402 IncrementalHoareTripleChecker+Valid, 1240 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.9s IncrementalHoareTripleChecker+Time [2021-12-18 04:20:54,270 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1896 Valid, 7735 Invalid, 1644 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [402 Valid, 1240 Invalid, 2 Unknown, 0 Unchecked, 7.9s Time] [2021-12-18 04:20:54,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4271 states. [2021-12-18 04:20:54,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4271 to 4137. [2021-12-18 04:20:54,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4137 states, 3257 states have (on average 1.431992631255757) internal successors, (4664), 3279 states have internal predecessors, (4664), 721 states have call successors, (721), 153 states have call predecessors, (721), 158 states have return successors, (738), 720 states have call predecessors, (738), 720 states have call successors, (738) [2021-12-18 04:20:54,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4137 states to 4137 states and 6123 transitions. [2021-12-18 04:20:54,387 INFO L78 Accepts]: Start accepts. Automaton has 4137 states and 6123 transitions. Word has length 46 [2021-12-18 04:20:54,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:20:54,387 INFO L470 AbstractCegarLoop]: Abstraction has 4137 states and 6123 transitions. [2021-12-18 04:20:54,387 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:20:54,388 INFO L276 IsEmpty]: Start isEmpty. Operand 4137 states and 6123 transitions. [2021-12-18 04:20:54,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2021-12-18 04:20:54,398 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:20:54,398 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:20:54,398 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-18 04:20:54,399 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:20:54,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:20:54,399 INFO L85 PathProgramCache]: Analyzing trace with hash -642422905, now seen corresponding path program 1 times [2021-12-18 04:20:54,399 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:20:54,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [482299050] [2021-12-18 04:20:54,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:20:54,400 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:20:54,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:20:54,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:20:54,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:20:54,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:20:54,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-18 04:20:54,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-18 04:20:54,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-18 04:20:54,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-18 04:20:54,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:20:54,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:20:54,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:54,706 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-12-18 04:20:54,706 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:20:54,707 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [482299050] [2021-12-18 04:20:54,707 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [482299050] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:20:54,707 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:20:54,707 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:20:54,709 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1706902083] [2021-12-18 04:20:54,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:20:54,709 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:20:54,710 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:20:54,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:20:54,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:20:54,710 INFO L87 Difference]: Start difference. First operand 4137 states and 6123 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-18 04:20:56,817 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:01,167 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:01,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:01,629 INFO L93 Difference]: Finished difference Result 6996 states and 10303 transitions. [2021-12-18 04:21:01,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:21:01,630 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 103 [2021-12-18 04:21:01,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:01,653 INFO L225 Difference]: With dead ends: 6996 [2021-12-18 04:21:01,653 INFO L226 Difference]: Without dead ends: 2871 [2021-12-18 04:21:01,685 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:21:01,687 INFO L933 BasicCegarLoop]: 1536 mSDtfsCounter, 768 mSDsluCounter, 2103 mSDsCounter, 0 mSdLazyCounter, 777 mSolverCounterSat, 458 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 804 SdHoareTripleChecker+Valid, 3639 SdHoareTripleChecker+Invalid, 1237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 458 IncrementalHoareTripleChecker+Valid, 777 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:01,687 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [804 Valid, 3639 Invalid, 1237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [458 Valid, 777 Invalid, 2 Unknown, 0 Unchecked, 6.8s Time] [2021-12-18 04:21:01,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2871 states. [2021-12-18 04:21:01,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2871 to 2756. [2021-12-18 04:21:01,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2756 states, 2189 states have (on average 1.423937871174052) internal successors, (3117), 2202 states have internal predecessors, (3117), 446 states have call successors, (446), 118 states have call predecessors, (446), 120 states have return successors, (456), 443 states have call predecessors, (456), 445 states have call successors, (456) [2021-12-18 04:21:01,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2756 states to 2756 states and 4019 transitions. [2021-12-18 04:21:01,768 INFO L78 Accepts]: Start accepts. Automaton has 2756 states and 4019 transitions. Word has length 103 [2021-12-18 04:21:01,768 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:01,768 INFO L470 AbstractCegarLoop]: Abstraction has 2756 states and 4019 transitions. [2021-12-18 04:21:01,769 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-18 04:21:01,769 INFO L276 IsEmpty]: Start isEmpty. Operand 2756 states and 4019 transitions. [2021-12-18 04:21:01,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2021-12-18 04:21:01,773 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:01,774 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:01,774 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-18 04:21:01,774 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:01,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:01,774 INFO L85 PathProgramCache]: Analyzing trace with hash 96929181, now seen corresponding path program 1 times [2021-12-18 04:21:01,775 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:01,775 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650665964] [2021-12-18 04:21:01,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:01,775 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:01,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:02,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:02,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:02,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:21:02,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-18 04:21:02,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:21:02,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-18 04:21:02,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-18 04:21:02,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:21:02,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-18 04:21:02,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-18 04:21:02,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-18 04:21:02,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:02,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:02,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:02,307 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-18 04:21:02,307 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:02,309 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650665964] [2021-12-18 04:21:02,309 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650665964] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:02,309 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:02,309 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-18 04:21:02,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1404067701] [2021-12-18 04:21:02,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:02,310 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-18 04:21:02,310 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:02,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-18 04:21:02,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:21:02,311 INFO L87 Difference]: Start difference. First operand 2756 states and 4019 transitions. Second operand has 7 states, 7 states have (on average 13.0) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 4 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-18 04:21:04,442 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:09,137 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:09,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:09,750 INFO L93 Difference]: Finished difference Result 5380 states and 7886 transitions. [2021-12-18 04:21:09,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 04:21:09,755 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 13.0) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 4 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2021-12-18 04:21:09,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:09,770 INFO L225 Difference]: With dead ends: 5380 [2021-12-18 04:21:09,779 INFO L226 Difference]: Without dead ends: 2846 [2021-12-18 04:21:09,799 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2021-12-18 04:21:09,801 INFO L933 BasicCegarLoop]: 1500 mSDtfsCounter, 313 mSDsluCounter, 4921 mSDsCounter, 0 mSdLazyCounter, 1048 mSolverCounterSat, 384 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 6421 SdHoareTripleChecker+Invalid, 1434 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 384 IncrementalHoareTripleChecker+Valid, 1048 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:09,802 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [323 Valid, 6421 Invalid, 1434 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [384 Valid, 1048 Invalid, 2 Unknown, 0 Unchecked, 7.2s Time] [2021-12-18 04:21:09,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2846 states. [2021-12-18 04:21:09,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2846 to 2756. [2021-12-18 04:21:09,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2756 states, 2187 states have (on average 1.4224965706447188) internal successors, (3111), 2201 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 122 states have return successors, (462), 444 states have call predecessors, (462), 445 states have call successors, (462) [2021-12-18 04:21:09,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2756 states to 2756 states and 4019 transitions. [2021-12-18 04:21:09,858 INFO L78 Accepts]: Start accepts. Automaton has 2756 states and 4019 transitions. Word has length 144 [2021-12-18 04:21:09,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:09,859 INFO L470 AbstractCegarLoop]: Abstraction has 2756 states and 4019 transitions. [2021-12-18 04:21:09,859 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 13.0) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 4 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-18 04:21:09,859 INFO L276 IsEmpty]: Start isEmpty. Operand 2756 states and 4019 transitions. [2021-12-18 04:21:09,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-12-18 04:21:09,875 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:09,875 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:09,876 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-18 04:21:09,876 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:09,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:09,876 INFO L85 PathProgramCache]: Analyzing trace with hash 36910958, now seen corresponding path program 1 times [2021-12-18 04:21:09,876 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:09,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [39844542] [2021-12-18 04:21:09,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:09,877 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:10,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:10,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:10,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:10,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:21:10,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-18 04:21:10,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:21:10,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-18 04:21:10,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-18 04:21:10,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:21:10,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-18 04:21:10,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-18 04:21:10,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:10,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-18 04:21:10,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:11,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:11,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:11,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:11,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:11,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:21:11,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:11,323 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-18 04:21:11,323 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:11,323 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [39844542] [2021-12-18 04:21:11,323 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [39844542] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:11,323 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:11,324 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2021-12-18 04:21:11,324 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1185154641] [2021-12-18 04:21:11,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:11,324 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2021-12-18 04:21:11,324 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:11,324 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-12-18 04:21:11,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=239, Unknown=0, NotChecked=0, Total=272 [2021-12-18 04:21:11,325 INFO L87 Difference]: Start difference. First operand 2756 states and 4019 transitions. Second operand has 17 states, 16 states have (on average 6.0) internal successors, (96), 11 states have internal predecessors, (96), 3 states have call successors, (16), 4 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-18 04:21:13,554 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:15,584 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:20,391 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:23,458 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:27,649 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:31,945 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.77s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:33,989 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:37,212 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:37,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:37,727 INFO L93 Difference]: Finished difference Result 6799 states and 10167 transitions. [2021-12-18 04:21:37,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-12-18 04:21:37,728 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 6.0) internal successors, (96), 11 states have internal predecessors, (96), 3 states have call successors, (16), 4 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) Word has length 151 [2021-12-18 04:21:37,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:37,742 INFO L225 Difference]: With dead ends: 6799 [2021-12-18 04:21:37,743 INFO L226 Difference]: Without dead ends: 4265 [2021-12-18 04:21:37,749 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=67, Invalid=439, Unknown=0, NotChecked=0, Total=506 [2021-12-18 04:21:37,750 INFO L933 BasicCegarLoop]: 2375 mSDtfsCounter, 839 mSDsluCounter, 30973 mSDsCounter, 0 mSdLazyCounter, 4081 mSolverCounterSat, 201 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 24.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 976 SdHoareTripleChecker+Valid, 33348 SdHoareTripleChecker+Invalid, 4289 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 201 IncrementalHoareTripleChecker+Valid, 4081 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 26.0s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:37,750 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [976 Valid, 33348 Invalid, 4289 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [201 Valid, 4081 Invalid, 7 Unknown, 0 Unchecked, 26.0s Time] [2021-12-18 04:21:37,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4265 states. [2021-12-18 04:21:37,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4265 to 2763. [2021-12-18 04:21:37,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4204286365709073) internal successors, (3115), 2205 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:21:37,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4025 transitions. [2021-12-18 04:21:37,829 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4025 transitions. Word has length 151 [2021-12-18 04:21:37,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:37,830 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4025 transitions. [2021-12-18 04:21:37,830 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 6.0) internal successors, (96), 11 states have internal predecessors, (96), 3 states have call successors, (16), 4 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-18 04:21:37,830 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4025 transitions. [2021-12-18 04:21:37,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-18 04:21:37,837 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:37,837 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:37,837 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-18 04:21:37,837 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:37,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:37,838 INFO L85 PathProgramCache]: Analyzing trace with hash 1511771000, now seen corresponding path program 1 times [2021-12-18 04:21:37,838 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:37,838 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [146792644] [2021-12-18 04:21:37,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:37,838 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:37,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:38,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:38,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:38,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:21:38,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-18 04:21:38,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:21:38,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-18 04:21:38,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-18 04:21:38,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:21:38,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-18 04:21:38,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-18 04:21:38,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-12-18 04:21:38,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-18 04:21:38,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-18 04:21:38,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-18 04:21:38,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-12-18 04:21:38,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:38,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:38,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:21:38,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:38,217 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 165 trivial. 0 not checked. [2021-12-18 04:21:38,217 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:38,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [146792644] [2021-12-18 04:21:38,218 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [146792644] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:38,218 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:38,218 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:21:38,218 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956144985] [2021-12-18 04:21:38,218 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:38,218 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:21:38,219 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:38,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:21:38,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:21:38,219 INFO L87 Difference]: Start difference. First operand 2763 states and 4025 transitions. Second operand has 6 states, 6 states have (on average 20.0) internal successors, (120), 4 states have internal predecessors, (120), 2 states have call successors, (20), 4 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:21:40,302 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:46,430 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:49,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:49,570 INFO L93 Difference]: Finished difference Result 8015 states and 12105 transitions. [2021-12-18 04:21:49,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:21:49,571 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 20.0) internal successors, (120), 4 states have internal predecessors, (120), 2 states have call successors, (20), 4 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 190 [2021-12-18 04:21:49,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:49,612 INFO L225 Difference]: With dead ends: 8015 [2021-12-18 04:21:49,612 INFO L226 Difference]: Without dead ends: 5474 [2021-12-18 04:21:49,634 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:21:49,635 INFO L933 BasicCegarLoop]: 2474 mSDtfsCounter, 1931 mSDsluCounter, 6274 mSDsCounter, 0 mSdLazyCounter, 2071 mSolverCounterSat, 404 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2064 SdHoareTripleChecker+Valid, 8748 SdHoareTripleChecker+Invalid, 2477 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 404 IncrementalHoareTripleChecker+Valid, 2071 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:49,636 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2064 Valid, 8748 Invalid, 2477 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [404 Valid, 2071 Invalid, 2 Unknown, 0 Unchecked, 11.2s Time] [2021-12-18 04:21:49,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5474 states. [2021-12-18 04:21:49,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5474 to 2767. [2021-12-18 04:21:49,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2767 states, 2197 states have (on average 1.4196631770596269) internal successors, (3119), 2209 states have internal predecessors, (3119), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:21:49,768 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2767 states to 2767 states and 4029 transitions. [2021-12-18 04:21:49,769 INFO L78 Accepts]: Start accepts. Automaton has 2767 states and 4029 transitions. Word has length 190 [2021-12-18 04:21:49,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:49,770 INFO L470 AbstractCegarLoop]: Abstraction has 2767 states and 4029 transitions. [2021-12-18 04:21:49,771 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 20.0) internal successors, (120), 4 states have internal predecessors, (120), 2 states have call successors, (20), 4 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:21:49,771 INFO L276 IsEmpty]: Start isEmpty. Operand 2767 states and 4029 transitions. [2021-12-18 04:21:49,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-18 04:21:49,784 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:49,785 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:49,785 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-18 04:21:49,788 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:49,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:49,789 INFO L85 PathProgramCache]: Analyzing trace with hash 1309859301, now seen corresponding path program 1 times [2021-12-18 04:21:49,789 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:49,789 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [133913891] [2021-12-18 04:21:49,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:49,789 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:50,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:50,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:50,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:50,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:21:50,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-18 04:21:50,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:21:50,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-18 04:21:50,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-18 04:21:50,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:21:50,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-18 04:21:50,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-18 04:21:50,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-12-18 04:21:50,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-18 04:21:50,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-18 04:21:50,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-18 04:21:50,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-18 04:21:50,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-18 04:21:50,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:50,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:50,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:21:50,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,296 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 177 trivial. 0 not checked. [2021-12-18 04:21:50,297 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:50,297 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [133913891] [2021-12-18 04:21:50,297 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [133913891] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:50,297 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:50,297 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:21:50,298 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [909572167] [2021-12-18 04:21:50,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:50,298 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:21:50,298 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:50,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:21:50,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:21:50,299 INFO L87 Difference]: Start difference. First operand 2767 states and 4029 transitions. Second operand has 5 states, 5 states have (on average 25.2) internal successors, (126), 3 states have internal predecessors, (126), 2 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-18 04:21:52,379 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:54,420 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:00,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:00,190 INFO L93 Difference]: Finished difference Result 5397 states and 7888 transitions. [2021-12-18 04:22:00,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-18 04:22:00,190 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 25.2) internal successors, (126), 3 states have internal predecessors, (126), 2 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2021-12-18 04:22:00,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:00,206 INFO L225 Difference]: With dead ends: 5397 [2021-12-18 04:22:00,206 INFO L226 Difference]: Without dead ends: 2852 [2021-12-18 04:22:00,211 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:22:00,212 INFO L933 BasicCegarLoop]: 1499 mSDtfsCounter, 156 mSDsluCounter, 2779 mSDsCounter, 0 mSdLazyCounter, 1295 mSolverCounterSat, 191 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 4278 SdHoareTripleChecker+Invalid, 1488 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 191 IncrementalHoareTripleChecker+Valid, 1295 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.8s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:00,213 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 4278 Invalid, 1488 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [191 Valid, 1295 Invalid, 2 Unknown, 0 Unchecked, 9.8s Time] [2021-12-18 04:22:00,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2852 states. [2021-12-18 04:22:00,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2852 to 2769. [2021-12-18 04:22:00,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.419281491587085) internal successors, (3121), 2211 states have internal predecessors, (3121), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:22:00,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4031 transitions. [2021-12-18 04:22:00,269 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4031 transitions. Word has length 200 [2021-12-18 04:22:00,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:00,269 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4031 transitions. [2021-12-18 04:22:00,270 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 25.2) internal successors, (126), 3 states have internal predecessors, (126), 2 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-18 04:22:00,270 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4031 transitions. [2021-12-18 04:22:00,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-18 04:22:00,275 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:00,275 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:00,275 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-18 04:22:00,275 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:00,276 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:00,276 INFO L85 PathProgramCache]: Analyzing trace with hash -1768954269, now seen corresponding path program 1 times [2021-12-18 04:22:00,276 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:22:00,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1797977949] [2021-12-18 04:22:00,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:00,276 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:22:29,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:22:29,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:22:29,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:22:29,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:22:29,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-18 04:22:29,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:22:29,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-18 04:22:29,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-18 04:22:29,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:22:29,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-18 04:22:29,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-18 04:22:29,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2021-12-18 04:22:29,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-18 04:22:29,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-18 04:22:29,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-18 04:22:29,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-18 04:22:29,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:29,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-18 04:22:29,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:30,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:30,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:30,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:30,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:30,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:22:30,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:30,278 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2021-12-18 04:22:30,278 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:22:30,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1797977949] [2021-12-18 04:22:30,278 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1797977949] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:22:30,278 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:22:30,278 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2021-12-18 04:22:30,278 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1818553710] [2021-12-18 04:22:30,278 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:22:30,278 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2021-12-18 04:22:30,279 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:22:30,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-12-18 04:22:30,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=239, Unknown=0, NotChecked=0, Total=272 [2021-12-18 04:22:30,279 INFO L87 Difference]: Start difference. First operand 2769 states and 4031 transitions. Second operand has 17 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 3 states have call successors, (21), 4 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-18 04:22:32,499 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:37,539 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:40,615 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:42,612 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:44,359 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.52s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:44,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:44,548 INFO L93 Difference]: Finished difference Result 6976 states and 10413 transitions. [2021-12-18 04:22:44,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-18 04:22:44,548 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 3 states have call successors, (21), 4 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2021-12-18 04:22:44,549 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:44,589 INFO L225 Difference]: With dead ends: 6976 [2021-12-18 04:22:44,589 INFO L226 Difference]: Without dead ends: 4429 [2021-12-18 04:22:44,610 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-12-18 04:22:44,611 INFO L933 BasicCegarLoop]: 2475 mSDtfsCounter, 1085 mSDsluCounter, 31101 mSDsCounter, 0 mSdLazyCounter, 3270 mSolverCounterSat, 395 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1233 SdHoareTripleChecker+Valid, 33576 SdHoareTripleChecker+Invalid, 3667 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 395 IncrementalHoareTripleChecker+Valid, 3270 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.9s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:44,611 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1233 Valid, 33576 Invalid, 3667 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [395 Valid, 3270 Invalid, 2 Unknown, 0 Unchecked, 13.9s Time] [2021-12-18 04:22:44,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4429 states. [2021-12-18 04:22:44,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4429 to 2773. [2021-12-18 04:22:44,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2773 states, 2203 states have (on average 1.4185201997276442) internal successors, (3125), 2213 states have internal predecessors, (3125), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 449 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:22:44,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2773 states to 2773 states and 4035 transitions. [2021-12-18 04:22:44,743 INFO L78 Accepts]: Start accepts. Automaton has 2773 states and 4035 transitions. Word has length 200 [2021-12-18 04:22:44,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:44,743 INFO L470 AbstractCegarLoop]: Abstraction has 2773 states and 4035 transitions. [2021-12-18 04:22:44,743 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 3 states have call successors, (21), 4 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-18 04:22:44,744 INFO L276 IsEmpty]: Start isEmpty. Operand 2773 states and 4035 transitions. [2021-12-18 04:22:44,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 203 [2021-12-18 04:22:44,750 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:44,750 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:44,750 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-18 04:22:44,750 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:44,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:44,751 INFO L85 PathProgramCache]: Analyzing trace with hash -1821148220, now seen corresponding path program 1 times [2021-12-18 04:22:44,751 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:22:44,751 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [387002679] [2021-12-18 04:22:44,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:44,751 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:22:44,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:22:44,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:22:44,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:22:44,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-18 04:22:44,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-18 04:22:44,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:22:44,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-18 04:22:44,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-18 04:22:44,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:22:44,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-18 04:22:44,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:44,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-18 04:22:44,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-18 04:22:45,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:45,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:45,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:22:45,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-18 04:22:45,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 137 [2021-12-18 04:22:45,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-18 04:22:45,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:45,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 04:22:45,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-18 04:22:45,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:45,161 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-12-18 04:22:45,161 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:22:45,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [387002679] [2021-12-18 04:22:45,162 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [387002679] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:22:45,162 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:22:45,162 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-18 04:22:45,164 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [947697126] [2021-12-18 04:22:45,164 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:22:45,165 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-18 04:22:45,165 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:22:45,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-18 04:22:45,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-18 04:22:45,166 INFO L87 Difference]: Start difference. First operand 2773 states and 4035 transitions. Second operand has 10 states, 10 states have (on average 13.4) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 7 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-18 04:22:47,350 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:52,716 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:58,941 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:23:02,199 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:23:06,308 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.47s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:23:08,171 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.86s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:23:08,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:08,984 INFO L93 Difference]: Finished difference Result 6692 states and 9962 transitions. [2021-12-18 04:23:08,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-18 04:23:08,985 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 13.4) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 7 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) Word has length 202 [2021-12-18 04:23:08,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:08,993 INFO L225 Difference]: With dead ends: 6692 [2021-12-18 04:23:08,993 INFO L226 Difference]: Without dead ends: 4141 [2021-12-18 04:23:08,998 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2021-12-18 04:23:08,999 INFO L933 BasicCegarLoop]: 2248 mSDtfsCounter, 777 mSDsluCounter, 10653 mSDsCounter, 0 mSdLazyCounter, 3264 mSolverCounterSat, 213 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 22.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 904 SdHoareTripleChecker+Valid, 12901 SdHoareTripleChecker+Invalid, 3481 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 213 IncrementalHoareTripleChecker+Valid, 3264 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 23.6s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:09,000 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [904 Valid, 12901 Invalid, 3481 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [213 Valid, 3264 Invalid, 4 Unknown, 0 Unchecked, 23.6s Time] [2021-12-18 04:23:09,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4141 states. [2021-12-18 04:23:09,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4141 to 2781. [2021-12-18 04:23:09,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2781 states, 2209 states have (on average 1.4173834314169307) internal successors, (3131), 2219 states have internal predecessors, (3131), 446 states have call successors, (446), 118 states have call predecessors, (446), 125 states have return successors, (468), 451 states have call predecessors, (468), 445 states have call successors, (468) [2021-12-18 04:23:09,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2781 states to 2781 states and 4045 transitions. [2021-12-18 04:23:09,066 INFO L78 Accepts]: Start accepts. Automaton has 2781 states and 4045 transitions. Word has length 202 [2021-12-18 04:23:09,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:09,066 INFO L470 AbstractCegarLoop]: Abstraction has 2781 states and 4045 transitions. [2021-12-18 04:23:09,067 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 13.4) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 7 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-18 04:23:09,067 INFO L276 IsEmpty]: Start isEmpty. Operand 2781 states and 4045 transitions. [2021-12-18 04:23:09,072 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 227 [2021-12-18 04:23:09,072 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:09,072 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:09,073 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-18 04:23:09,073 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:09,073 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:09,073 INFO L85 PathProgramCache]: Analyzing trace with hash 1917943735, now seen corresponding path program 1 times [2021-12-18 04:23:09,073 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:23:09,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1034070853] [2021-12-18 04:23:09,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:09,074 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:23:11,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 04:23:11,581 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-18 04:23:13,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 04:23:14,119 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-18 04:23:14,120 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-18 04:23:14,120 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-18 04:23:14,122 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-18 04:23:14,124 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:14,126 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-18 04:23:14,175 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,176 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,176 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,176 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,177 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,177 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,177 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,177 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,177 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,177 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:23:14,368 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.12 04:23:14 BoogieIcfgContainer [2021-12-18 04:23:14,368 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-18 04:23:14,369 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-18 04:23:14,369 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-18 04:23:14,369 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-18 04:23:14,369 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:20:38" (3/4) ... [2021-12-18 04:23:14,371 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-18 04:23:14,371 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-18 04:23:14,372 INFO L158 Benchmark]: Toolchain (without parser) took 165703.68ms. Allocated memory was 107.0MB in the beginning and 1.5GB in the end (delta: 1.4GB). Free memory was 78.3MB in the beginning and 1.1GB in the end (delta: -1.0GB). Peak memory consumption was 326.4MB. Max. memory is 16.1GB. [2021-12-18 04:23:14,372 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 88.1MB. Free memory was 43.3MB in the beginning and 43.2MB in the end (delta: 41.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 04:23:14,373 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2055.02ms. Allocated memory was 107.0MB in the beginning and 167.8MB in the end (delta: 60.8MB). Free memory was 78.1MB in the beginning and 97.6MB in the end (delta: -19.5MB). Peak memory consumption was 87.7MB. Max. memory is 16.1GB. [2021-12-18 04:23:14,373 INFO L158 Benchmark]: Boogie Procedure Inliner took 236.52ms. Allocated memory is still 167.8MB. Free memory was 97.6MB in the beginning and 71.3MB in the end (delta: 26.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2021-12-18 04:23:14,373 INFO L158 Benchmark]: Boogie Preprocessor took 212.97ms. Allocated memory was 167.8MB in the beginning and 251.7MB in the end (delta: 83.9MB). Free memory was 71.3MB in the beginning and 158.8MB in the end (delta: -87.5MB). Peak memory consumption was 31.6MB. Max. memory is 16.1GB. [2021-12-18 04:23:14,374 INFO L158 Benchmark]: RCFGBuilder took 7069.05ms. Allocated memory was 251.7MB in the beginning and 457.2MB in the end (delta: 205.5MB). Free memory was 158.8MB in the beginning and 297.0MB in the end (delta: -138.2MB). Peak memory consumption was 156.2MB. Max. memory is 16.1GB. [2021-12-18 04:23:14,374 INFO L158 Benchmark]: TraceAbstraction took 156107.02ms. Allocated memory was 457.2MB in the beginning and 1.5GB in the end (delta: 1.0GB). Free memory was 297.0MB in the beginning and 1.1GB in the end (delta: -805.7MB). Peak memory consumption was 862.0MB. Max. memory is 16.1GB. [2021-12-18 04:23:14,374 INFO L158 Benchmark]: Witness Printer took 2.64ms. Allocated memory is still 1.5GB. Free memory was 1.1GB in the beginning and 1.1GB in the end (delta: 506.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 04:23:14,376 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 88.1MB. Free memory was 43.3MB in the beginning and 43.2MB in the end (delta: 41.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2055.02ms. Allocated memory was 107.0MB in the beginning and 167.8MB in the end (delta: 60.8MB). Free memory was 78.1MB in the beginning and 97.6MB in the end (delta: -19.5MB). Peak memory consumption was 87.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 236.52ms. Allocated memory is still 167.8MB. Free memory was 97.6MB in the beginning and 71.3MB in the end (delta: 26.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 212.97ms. Allocated memory was 167.8MB in the beginning and 251.7MB in the end (delta: 83.9MB). Free memory was 71.3MB in the beginning and 158.8MB in the end (delta: -87.5MB). Peak memory consumption was 31.6MB. Max. memory is 16.1GB. * RCFGBuilder took 7069.05ms. Allocated memory was 251.7MB in the beginning and 457.2MB in the end (delta: 205.5MB). Free memory was 158.8MB in the beginning and 297.0MB in the end (delta: -138.2MB). Peak memory consumption was 156.2MB. Max. memory is 16.1GB. * TraceAbstraction took 156107.02ms. Allocated memory was 457.2MB in the beginning and 1.5GB in the end (delta: 1.0GB). Free memory was 297.0MB in the beginning and 1.1GB in the end (delta: -805.7MB). Peak memory consumption was 862.0MB. Max. memory is 16.1GB. * Witness Printer took 2.64ms. Allocated memory is still 1.5GB. Free memory was 1.1GB in the beginning and 1.1GB in the end (delta: 506.0kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7417]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 7550, overapproximation of bitwiseOr at line 9385, overapproximation of bitwiseAnd at line 9183. Possible FailurePath: [L7440] int ldv_state_variable_3 ; [L7441] int LDV_IN_INTERRUPT = 1; [L7442] int ldv_state_variable_2 ; [L7443] struct sdio_func *mwifiex_sdio_group0 ; [L7444] int ref_cnt ; [L7445] struct mwifiex_adapter *sdio_ops_group0 ; [L7446] int ldv_state_variable_1 ; [L7447] struct device *mwifiex_sdio_pm_ops_group1 ; [L7448] int ldv_state_variable_4 ; [L7449] int ldv_state_variable_0 ; [L7450] struct sk_buff *sdio_ops_group1 ; [L7543-L7545] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd87xx = {1U, 1U, 64U, 65U, 48U, 3U, 96U, 97U, 63U, 65534U, 64U, 4U, 5U, (unsigned char)0, (unsigned char)0, 6U, 7U, (unsigned char)0, (unsigned char)0, 8U, 9U, 108U}; [L7546-L7548] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd8897 = {0U, 0U, 96U, 97U, 80U, 195U, 192U, 193U, 255U, 4294967295U, 184U, 4U, 5U, 6U, 7U, 8U, 9U, 10U, 11U, 12U, 13U, 204U}; [L7549-L7551] static struct mwifiex_sdio_device const mwifiex_sdio_sd8786 = {"mrvl/sd8786_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7552-L7554] static struct mwifiex_sdio_device const mwifiex_sdio_sd8787 = {"mrvl/sd8787_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7555-L7557] static struct mwifiex_sdio_device const mwifiex_sdio_sd8797 = {"mrvl/sd8797_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7558-L7560] static struct mwifiex_sdio_device const mwifiex_sdio_sd8897 = {"mrvl/sd8897_uapsta.bin", & mwifiex_reg_sd8897, 32U, 16U, 1, 0, 4096U, 32768U, 32768U}; [L7646] static u8 user_rmmod ; [L7648] static struct semaphore add_remove_card_sem ; [L7879-L7882] static struct sdio_device_id const mwifiex_ids[5U] = { {255U, 735U, 37142U, (unsigned long )(& mwifiex_sdio_sd8786)}, {255U, 735U, 37145U, (unsigned long )(& mwifiex_sdio_sd8787)}, {255U, 735U, 37161U, (unsigned long )(& mwifiex_sdio_sd8797)}, {255U, 735U, 37165U, (unsigned long )(& mwifiex_sdio_sd8897)}}; [L7883] struct sdio_device_id const __mod_sdio__mwifiex_ids_device_table ; [L7884-L7886] static struct dev_pm_ops const mwifiex_sdio_pm_ops = {0, 0, & mwifiex_sdio_suspend, & mwifiex_sdio_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7887-L7889] static struct sdio_driver mwifiex_sdio = {(char *)"mwifiex_sdio", (struct sdio_device_id const *)(& mwifiex_ids), & mwifiex_sdio_probe, & mwifiex_sdio_remove, {0, 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_sdio_pm_ops, 0}}; [L9929] static struct mmc_host *reset_host ; [L9954-L9955] static struct work_struct card_reset_work = {{137438953424L}, {& card_reset_work.entry, & card_reset_work.entry}, & sdio_card_reset_worker, {(struct lock_class_key *)(& card_reset_work), {0, 0}, "card_reset_work", 0, 0UL}}; [L9966-L9972] static struct mwifiex_if_ops sdio_ops = {& mwifiex_init_sdio, & mwifiex_cleanup_sdio, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_sdio_enable_host_int, & mwifiex_sdio_disable_host_int, & mwifiex_process_int_status, & mwifiex_sdio_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, & mwifiex_update_mp_end_port, & mwifiex_cleanup_mpa_buf, & mwifiex_sdio_cmdrsp_complete, & mwifiex_sdio_cmdrsp_complete, 0, 0, 0, & mwifiex_sdio_card_reset, 0, 0}; [L9999] int ldv_retval_2 ; [L10000] int ldv_retval_5 ; [L10001] int ldv_retval_0 ; [L10002] int ldv_retval_6 ; [L10003] int ldv_retval_1 ; [L10010] int ldv_retval_4 ; [L10012] int ldv_retval_8 ; [L10013] int ldv_retval_3 ; [L10014] int ldv_retval_7 ; [L10462] Element set_impl[15] ; [L10463] int last_index = 0; [L10597] Set LDV_SKBS ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10047] u32 ldvarg1 ; [L10048] u32 tmp ; [L10049] u16 ldvarg4 ; [L10050] u16 tmp___0 ; [L10051] u8 ldvarg3 ; [L10052] u8 tmp___1 ; [L10053] struct mwifiex_fw_image *ldvarg0 ; [L10054] void *tmp___2 ; [L10055] struct mwifiex_tx_param *ldvarg2 ; [L10056] void *tmp___3 ; [L10057] struct sdio_device_id *ldvarg5 ; [L10058] void *tmp___4 ; [L10059] struct work_struct *ldvarg6 ; [L10060] void *tmp___5 ; [L10061] int tmp___6 ; [L10062] int tmp___7 ; [L10063] int tmp___8 ; [L10064] int tmp___9 ; [L10065] int tmp___10 ; [L10066] int tmp___11 ; [L10068] tmp = __VERIFIER_nondet_u32() [L10069] ldvarg1 = tmp [L10070] tmp___0 = __VERIFIER_nondet_u16() [L10071] ldvarg4 = tmp___0 [L10072] tmp___1 = __VERIFIER_nondet_u8() [L10073] ldvarg3 = tmp___1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg1=4294967260, ldvarg3=11, ldvarg4=65530, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, user_rmmod=0] [L10074] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=32, tmp___0=1, user_rmmod=0] [L10074] RET, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg1=4294967260, ldvarg3=11, ldvarg4=65530, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, user_rmmod=0] [L10074] tmp___2 = ldv_zalloc(32UL) [L10075] ldvarg0 = (struct mwifiex_fw_image *)tmp___2 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg3=11, ldvarg4=65530, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, user_rmmod=0] [L10076] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=4, tmp___0=1, user_rmmod=0] [L10076] RET, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg3=11, ldvarg4=65530, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, user_rmmod=0] [L10076] tmp___3 = ldv_zalloc(4UL) [L10077] ldvarg2 = (struct mwifiex_tx_param *)tmp___3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] CALL, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=16, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=16, tmp___0=1, user_rmmod=0] [L10078] RET, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] tmp___4 = ldv_zalloc(16UL) [L10079] ldvarg5 = (struct sdio_device_id *)tmp___4 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] CALL, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=80, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=80, tmp___0=1, user_rmmod=0] [L10080] RET, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] tmp___5 = ldv_zalloc(80UL) [L10081] ldvarg6 = (struct work_struct *)tmp___5 [L10082] CALL ldv_initialize() [L10616] CALL ldv_set_init(LDV_SKBS) [L10468] set = set_impl [L10469] last_index = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={315:0}, set_impl={315:0}, user_rmmod=0] [L10616] RET ldv_set_init(LDV_SKBS) [L10082] RET ldv_initialize() [L10083] ldv_state_variable_4 = 0 [L10084] ldv_state_variable_1 = 0 [L10085] ref_cnt = 0 [L10086] ldv_state_variable_0 = 1 [L10087] ldv_state_variable_3 = 0 [L10088] ldv_state_variable_2 = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: [L10324] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10325] COND TRUE ldv_state_variable_0 == 1 [L10326] CALL, EXPR mwifiex_sdio_init_module() [L9975] int tmp ; [L9977] CALL sema_init(& add_remove_card_sem, 1) [L7459] struct lock_class_key __key ; [L7460] struct semaphore __constr_expr_0 ; [L7462] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7463] __constr_expr_0.lock.magic = 3735899821U [L7464] __constr_expr_0.lock.owner_cpu = 4294967295U [L7465] __constr_expr_0.lock.owner = (void *)-1 [L7466] __constr_expr_0.lock.dep_map.key = 0 [L7467] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7468] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7469] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7470] __constr_expr_0.lock.dep_map.cpu = 0 [L7471] __constr_expr_0.lock.dep_map.ip = 0UL [L7472] __constr_expr_0.count = (unsigned int )val [L7473] __constr_expr_0.wait_list.next = & sem->wait_list [L7474] __constr_expr_0.wait_list.prev = & sem->wait_list [L7475] *sem = __constr_expr_0 [L7476] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7477] return; [L7477] return; VAL [\old(val)=1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, sem={309:0}, sem={309:0}, set_impl={315:0}, user_rmmod=0, val=1] [L9977] RET sema_init(& add_remove_card_sem, 1) [L9978] user_rmmod = 0U [L9979] CALL, EXPR sdio_register_driver(& mwifiex_sdio) [L10826] return __VERIFIER_nondet_int(); [L9979] RET, EXPR sdio_register_driver(& mwifiex_sdio) [L9979] tmp = sdio_register_driver(& mwifiex_sdio) [L9980] return (tmp); VAL [\result=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=0, user_rmmod=0] [L10326] RET, EXPR mwifiex_sdio_init_module() [L10326] ldv_retval_7 = mwifiex_sdio_init_module() [L10327] COND FALSE !(ldv_retval_7 != 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10332] COND TRUE ldv_retval_7 == 0 [L10333] ldv_state_variable_0 = 2 [L10334] ldv_state_variable_2 = 1 [L10335] ldv_state_variable_3 = 1 [L10336] CALL ldv_initialize_sdio_driver_3() [L10029] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] CALL, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1488, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1488, tmp___0=1, user_rmmod=0] [L10031] RET, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(1488UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] tmp = ldv_zalloc(1488UL) [L10032] mwifiex_sdio_group0 = (struct sdio_func *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10336] RET ldv_initialize_sdio_driver_3() [L10337] ldv_state_variable_1 = 1 [L10338] CALL ldv_initialize_mwifiex_if_ops_1() [L10017] void *tmp ; [L10018] void *tmp___0 ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=6864, tmp___0=1, user_rmmod=0] [L10020] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] tmp = ldv_zalloc(6864UL) [L10021] sdio_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=232, tmp___0=1, user_rmmod=0] [L10022] RET, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] tmp___0 = ldv_zalloc(232UL) [L10023] sdio_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, tmp___0={0:0}, user_rmmod=0] [L10338] RET ldv_initialize_mwifiex_if_ops_1() [L10339] ldv_state_variable_4 = 1 [L10340] CALL ldv_dev_pm_ops_4() [L10038] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1416, tmp___0=1, user_rmmod=0] [L10040] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] tmp = ldv_zalloc(1416UL) [L10041] mwifiex_sdio_pm_ops_group1 = (struct device *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10340] RET ldv_dev_pm_ops_4() [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___9=1, user_rmmod=0] [L10183] COND TRUE ldv_state_variable_1 != 0 [L10184] tmp___8 = __VERIFIER_nondet_int() [L10186] case 0: [L10193] case 1: [L10200] case 2: [L10207] case 3: [L10214] case 4: [L10221] case 5: [L10228] case 6: [L10235] case 7: [L10242] case 8: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10243] COND TRUE ldv_state_variable_1 == 1 [L10244] CALL mwifiex_process_int_status(sdio_ops_group0) [L9125] struct sdio_mmc_card *card ; [L9126] struct mwifiex_sdio_card_reg const *reg ; [L9127] int ret ; [L9128] u8 sdio_ireg ; [L9129] struct sk_buff *skb ; [L9130] u8 port ; [L9131] u32 len_reg_l ; [L9132] u32 len_reg_u ; [L9133] u32 rx_blocks ; [L9134] u16 rx_len ; [L9135] unsigned long flags ; [L9136] u32 bitmap ; [L9137] u8 cr ; [L9138] raw_spinlock_t *tmp ; [L9139] u32 pkt_type ; [L9140] int tmp___0 ; [L9141] struct _ddebug descriptor ; [L9142] long tmp___1 ; [L9143] struct _ddebug descriptor___0 ; [L9144] long tmp___2 ; [L9145] struct _ddebug descriptor___1 ; [L9146] long tmp___3 ; [L9147] struct _ddebug descriptor___2 ; [L9148] long tmp___4 ; [L9149] struct _ddebug descriptor___3 ; [L9150] long tmp___5 ; [L9151] struct _ddebug descriptor___4 ; [L9152] long tmp___6 ; [L9153] struct _ddebug descriptor___5 ; [L9154] long tmp___7 ; [L9155] int tmp___8 ; [L9156] struct _ddebug descriptor___6 ; [L9157] long tmp___9 ; [L9158] int tmp___10 ; [L9159] struct _ddebug descriptor___7 ; [L9160] long tmp___11 ; [L9161] int tmp___12 ; [L9162] struct _ddebug descriptor___8 ; [L9163] long tmp___13 ; [L9164] int tmp___14 ; [L9166] EXPR adapter->card [L9166] card = (struct sdio_mmc_card *)adapter->card [L9167] EXPR card->reg [L9167] reg = card->reg [L9168] ret = 0 [L9169] port = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9170] CALL, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, lock={0:891}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7253] return (& lock->ldv_6338.rlock); VAL [\result={0:891}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, lock={0:891}, lock={0:891}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9170] RET, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, spinlock_check(& adapter->int_lock)={0:891}, user_rmmod=0] [L9170] tmp = spinlock_check(& adapter->int_lock) [L9171] CALL, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, arg0={0:891}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10693] return __VERIFIER_nondet_ulong(); [L9171] RET, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, _raw_spin_lock_irqsave(tmp)=137438953489, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9171] flags = _raw_spin_lock_irqsave(tmp) [L9172] EXPR adapter->int_status [L9172] sdio_ireg = adapter->int_status [L9173] adapter->int_status = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9174] CALL spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7259] FCALL _raw_spin_unlock_irqrestore(& lock->ldv_6338.rlock, flags) [L9174] RET spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9175] COND FALSE !((unsigned int )sdio_ireg == 0U) [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9179] EXPR adapter->cmd_sent [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U VAL [(int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U=1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, adapter->cmd_sent=-255, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9179] COND TRUE (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9180] adapter->cmd_sent = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9183] COND TRUE ((unsigned int )sdio_ireg & 64U) != 0U [L9184] EXPR card->mp_regs [L9184] EXPR card->mp_regs + 181UL [L9184] rx_len = (int )((u16 )*(card->mp_regs + 181UL)) << 8U [L9185] EXPR card->mp_regs [L9185] EXPR card->mp_regs + 180UL [L9185] rx_len = (int )((u16 )*(card->mp_regs + 180UL)) | (int )rx_len [L9186] rx_blocks = (u32 )(((int )rx_len + 255) / 256) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=5, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9187] COND FALSE !((unsigned int )rx_len <= 4U || rx_blocks * 256U > 4096U) [L9191] rx_len = (unsigned int )((unsigned short )rx_blocks) * 256U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10455] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10600] void *skb ; [L10601] void *tmp___7 ; VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND FALSE !(tmp___0 != 0) [L7390] EXPR, FCALL calloc(1UL, size) [L7390] tmp = calloc(1UL, size) [L7391] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, calloc(1UL, size)={316:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={316:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={316:0}, tmp___0=0, user_rmmod=0] [L7392] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7361] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7392] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, calloc(1UL, size)={316:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={316:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={316:0}, tmp___0=0, user_rmmod=0] [L7393] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={316:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, calloc(1UL, size)={316:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={316:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={316:0}, tmp___0=0, user_rmmod=0] [L10603] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={316:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L10604] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp___7={316:0}, user_rmmod=0] [L10605] COND FALSE !(! skb) [L10608] CALL ldv_set_add(LDV_SKBS, skb) [L10476] int i ; [L10478] i = 0 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={316:0}, e={316:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10479] COND TRUE 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={316:0}, e={316:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10480] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={316:0}, e={316:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10490] COND TRUE last_index < 15 [L10491] set_impl[last_index] = e [L10492] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={316:0}, e={316:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10608] RET ldv_set_add(LDV_SKBS, skb) [L10609] return (skb); VAL [\old(last_index)=0, \result={316:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp___7={316:0}, user_rmmod=0] [L10457] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_skb_alloc()={316:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] tmp = ldv_skb_alloc() [L10458] return (tmp); VAL [\old(last_index)=0, \old(length)=256, \result={316:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={316:0}, user_rmmod=0] [L9192] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, ldv_dev_alloc_skb_14((unsigned int )rx_len)={316:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] skb = ldv_dev_alloc_skb_14((unsigned int )rx_len) [L9193] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, user_rmmod=0] [L9197] CALL skb_put(skb, (unsigned int )rx_len) VAL [\old(arg1)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, arg0={316:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10857] EXPR arg0->data [L10857] EXPR arg0->tail [L10857] unsigned char *ret_val = arg0->data + arg0->tail; [L10858] EXPR arg0->tail [L10858] arg0->tail += arg1 [L10859] return ret_val; VAL [\old(arg1)=256, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, arg0={316:0}, arg0={316:0}, arg1=256, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, ret_val={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9197] RET skb_put(skb, (unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, skb_put(skb, (unsigned int )rx_len)={0:0}, tmp={0:891}, user_rmmod=0] [L9198] EXPR skb->data [L9198] EXPR skb->len [L9199] EXPR adapter->ioport VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, adapter->ioport=137438953474, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, skb->data={0:0}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] CALL, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [\old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={950:0}, user_rmmod=0] [L8505] int ret ; [L8506] u32 nb ; VAL [\old(ioport)=22, \old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, buffer={0:0}, card_reset_work={313:0}, ioport=22, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={950:0}, type={950:0}, user_rmmod=0] [L8508] COND TRUE (unsigned long )buffer == (unsigned long )((u8 *)0U) [L8509] adapter->dev [L8510] return (-1); VAL [\old(ioport)=22, \old(npayload)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, buffer={0:0}, card_reset_work={313:0}, ioport=22, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={950:0}, type={950:0}, user_rmmod=0] [L9198-L9199] RET, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, adapter->ioport=137438953474, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U)=-1, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, skb->data={0:0}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] tmp___0 = mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) [L9200] COND TRUE tmp___0 != 0 [L9201] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9203] CALL dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7486] FCALL __dev_kfree_skb_any(skb, 1) [L9203] RET dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953485:137438953440}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={635:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953485:137438953440}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={635:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953485:137438953440}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={635:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=255] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953485:137438953440}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={635:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=255] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); VAL [\old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=255] [L9368] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] tmp___10 = mwifiex_read_reg(adapter, 0U, & cr) [L9369] COND TRUE tmp___10 != 0 [L9370] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] EXPR \read(cr) VAL [\read(cr)=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] CALL, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7901] struct sdio_mmc_card *card ; [L7902] int ret ; [L7904] EXPR adapter->card [L7904] card = (struct sdio_mmc_card *)adapter->card [L7905] EXPR card->func VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7905] FCALL sdio_claim_host(card->func) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] EXPR card->func VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] CALL, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=0, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, func={137438953428:137438953487}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7892] int ret ; [L7894] ret = -1 [L7895] FCALL sdio_writeb(func, (int )data, reg, & ret) [L7896] EXPR \read(ret) [L7896] return (ret); [L7896] return (ret); VAL [\old(data)=0, \old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, data=0, func={137438953428:137438953487}, func={137438953428:137438953487}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] RET, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg_locked(card->func, reg, (int )data)=-1, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] ret = mwifiex_write_reg_locked(card->func, reg, (int )data) [L7907] EXPR card->func VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7907] FCALL sdio_release_host(card->func) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7908] return (ret); VAL [\old(data)=512, \old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9385] RET, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\read(cr)=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U))=-1, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] tmp___12 = mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) [L9386] COND TRUE tmp___12 != 0 [L9387] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={631:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={631:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={631:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=23] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card->func={137438953428:137438953487}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={631:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=23] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); VAL [\old(reg)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, data={632:0}, data={632:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=23] [L9401] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] tmp___14 = mwifiex_read_reg(adapter, 0U, & cr) [L9402] COND TRUE tmp___14 != 0 [L9403] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, cr={632:0}, descriptor={956:0}, descriptor___0={946:0}, descriptor___1={947:0}, descriptor___2={634:0}, descriptor___3={954:0}, descriptor___4={955:0}, descriptor___5={948:0}, descriptor___6={951:0}, descriptor___7={633:0}, descriptor___8={953:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={950:0}, port={957:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); VAL [\result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={632:0}, card_reset_work={313:0}, flags=137438953489, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg={137438953477:137438953454}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=128, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={316:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L10244] RET mwifiex_process_int_status(sdio_ops_group0) [L10245] ldv_state_variable_1 = 1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=1, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=0] [L10317] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L10318] CALL mwifiex_sdio_cleanup_module() [L9985] int tmp ; [L9987] CALL, EXPR down_interruptible(& add_remove_card_sem) [L10712] return __VERIFIER_nondet_int(); [L9987] RET, EXPR down_interruptible(& add_remove_card_sem) [L9987] tmp = down_interruptible(& add_remove_card_sem) [L9988] COND FALSE !(tmp == 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=1, user_rmmod=0] [L9992] user_rmmod = 1U [L9993] CALL cancel_work_sync(& card_reset_work) [L10700] return __VERIFIER_nondet_bool(); [L9993] RET cancel_work_sync(& card_reset_work) [L9994] FCALL sdio_unregister_driver(& mwifiex_sdio) [L10318] RET mwifiex_sdio_cleanup_module() [L10319] ldv_state_variable_0 = 3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967260, ldvarg2={0:0}, ldvarg3=11, ldvarg4=65530, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967260, tmp___0=65530, tmp___1=11, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=1] [L10407] CALL ldv_check_final_state() [L10667] int tmp___7 ; [L10669] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L10558] return (last_index == 0); VAL [\result=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=1] [L10669] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L10669] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L10670] COND FALSE !(\read(tmp___7)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp___7=0, user_rmmod=1] [L10672] CALL ldv_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] [L7417] reach_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953452:137438953471}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 41 procedures, 1068 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 155.8s, OverallIterations: 10, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 115.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 24 mSolverCounterUnknown, 10207 SdHoareTripleChecker+Valid, 112.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 9359 mSDsluCounter, 114752 SdHoareTripleChecker+Invalid, 105.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 96949 mSDsCounter, 3069 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 17882 IncrementalHoareTripleChecker+Invalid, 20975 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3069 mSolverCounterUnsat, 17803 mSDtfsCounter, 17882 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 342 GetRequests, 260 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4137occurred in iteration=2, InterpolantAutomatonStates: 74, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 9 MinimizatonAttempts, 7729 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 33.1s SatisfiabilityAnalysisTime, 3.0s InterpolantComputationTime, 1508 NumberOfCodeBlocks, 1508 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 1273 ConstructedInterpolants, 0 QuantifiedInterpolants, 2808 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 9 InterpolantComputations, 9 PerfectInterpolantSequences, 1105/1105 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-18 04:23:14,598 WARN L435 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-12-18 04:23:14,764 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-18 04:23:16,874 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-18 04:23:16,876 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-18 04:23:16,916 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-18 04:23:16,916 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-18 04:23:16,917 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-18 04:23:16,918 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-18 04:23:16,927 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-18 04:23:16,929 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-18 04:23:16,930 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-18 04:23:16,931 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-18 04:23:16,932 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-18 04:23:16,932 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-18 04:23:16,933 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-18 04:23:16,934 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-18 04:23:16,934 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-18 04:23:16,935 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-18 04:23:16,936 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-18 04:23:16,937 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-18 04:23:16,939 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-18 04:23:16,940 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-18 04:23:16,941 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-18 04:23:16,942 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-18 04:23:16,942 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-18 04:23:16,944 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-18 04:23:16,944 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-18 04:23:16,945 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-18 04:23:16,945 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-18 04:23:16,946 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-18 04:23:16,946 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-18 04:23:16,946 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-18 04:23:16,947 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-18 04:23:16,948 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-18 04:23:16,948 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-18 04:23:16,949 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-18 04:23:16,949 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-18 04:23:16,949 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-18 04:23:16,950 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-18 04:23:16,950 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-18 04:23:16,950 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-18 04:23:16,951 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-18 04:23:16,957 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-18 04:23:17,004 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-18 04:23:17,005 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-18 04:23:17,005 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-18 04:23:17,005 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-18 04:23:17,006 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-18 04:23:17,006 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-18 04:23:17,006 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-18 04:23:17,007 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-18 04:23:17,007 INFO L138 SettingsManager]: * Use SBE=true [2021-12-18 04:23:17,007 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-18 04:23:17,007 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-18 04:23:17,007 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-18 04:23:17,007 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-18 04:23:17,008 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-18 04:23:17,008 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-18 04:23:17,008 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-18 04:23:17,008 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-18 04:23:17,008 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-18 04:23:17,008 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-18 04:23:17,008 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-18 04:23:17,009 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-18 04:23:17,009 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-18 04:23:17,009 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-18 04:23:17,009 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:23:17,009 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-18 04:23:17,009 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-18 04:23:17,009 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-18 04:23:17,010 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-18 04:23:17,010 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-18 04:23:17,010 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-18 04:23:17,010 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-18 04:23:17,010 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-18 04:23:17,010 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-18 04:23:17,010 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-18 04:23:17,011 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-12-18 04:23:17,360 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-18 04:23:17,377 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-18 04:23:17,379 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-18 04:23:17,380 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-18 04:23:17,380 INFO L275 PluginConnector]: CDTParser initialized [2021-12-18 04:23:17,381 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-18 04:23:17,425 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f59097031/e838cc4dbd754b7a980656431cfaf70e/FLAGf658af521 [2021-12-18 04:23:18,182 INFO L306 CDTParser]: Found 1 translation units. [2021-12-18 04:23:18,183 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-18 04:23:18,216 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f59097031/e838cc4dbd754b7a980656431cfaf70e/FLAGf658af521 [2021-12-18 04:23:18,699 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f59097031/e838cc4dbd754b7a980656431cfaf70e [2021-12-18 04:23:18,703 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-18 04:23:18,705 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-18 04:23:18,715 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-18 04:23:18,715 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-18 04:23:18,718 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-18 04:23:18,718 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:23:18" (1/1) ... [2021-12-18 04:23:18,719 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@550238e0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:18, skipping insertion in model container [2021-12-18 04:23:18,719 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:23:18" (1/1) ... [2021-12-18 04:23:18,724 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-18 04:23:18,842 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 04:23:19,496 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-18 04:23:20,263 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:23:20,288 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-18 04:23:20,324 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 04:23:20,427 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-18 04:23:20,536 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:23:20,546 INFO L203 MainTranslator]: Completed pre-run [2021-12-18 04:23:20,666 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-12-18 04:23:20,792 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:23:20,915 INFO L208 MainTranslator]: Completed translation [2021-12-18 04:23:20,915 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20 WrapperNode [2021-12-18 04:23:20,915 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-18 04:23:20,917 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-18 04:23:20,917 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-18 04:23:20,917 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-18 04:23:20,922 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,007 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,117 INFO L137 Inliner]: procedures = 203, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4723 [2021-12-18 04:23:21,118 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-18 04:23:21,119 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-18 04:23:21,119 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-18 04:23:21,119 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-18 04:23:21,126 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,126 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,162 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,162 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,275 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,295 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,315 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,333 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-18 04:23:21,333 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-18 04:23:21,334 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-18 04:23:21,334 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-18 04:23:21,334 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (1/1) ... [2021-12-18 04:23:21,339 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:23:21,346 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 04:23:21,366 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-18 04:23:21,372 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-18 04:23:21,395 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:23:21,396 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2021-12-18 04:23:21,396 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-18 04:23:21,396 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-18 04:23:21,396 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2021-12-18 04:23:21,396 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-18 04:23:21,397 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-18 04:23:21,397 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-18 04:23:21,397 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-12-18 04:23:21,397 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-12-18 04:23:21,397 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-12-18 04:23:21,397 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-18 04:23:21,397 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-18 04:23:21,397 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2021-12-18 04:23:21,398 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-18 04:23:21,398 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-12-18 04:23:21,398 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2021-12-18 04:23:21,398 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2021-12-18 04:23:21,398 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2021-12-18 04:23:21,398 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-18 04:23:21,398 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-18 04:23:21,399 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2021-12-18 04:23:21,399 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-18 04:23:21,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-18 04:23:21,400 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2021-12-18 04:23:21,400 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-12-18 04:23:21,400 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2021-12-18 04:23:21,400 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2021-12-18 04:23:21,400 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-18 04:23:21,400 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2021-12-18 04:23:21,400 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2021-12-18 04:23:21,400 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2021-12-18 04:23:21,401 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2021-12-18 04:23:21,401 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2021-12-18 04:23:21,401 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2021-12-18 04:23:21,401 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-18 04:23:21,401 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2021-12-18 04:23:21,401 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-12-18 04:23:21,401 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-18 04:23:21,401 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-18 04:23:21,402 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-18 04:23:21,402 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2021-12-18 04:23:21,402 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-18 04:23:21,402 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-18 04:23:21,403 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2021-12-18 04:23:21,403 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2021-12-18 04:23:21,403 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-18 04:23:21,403 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-18 04:23:21,403 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-18 04:23:21,403 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2021-12-18 04:23:21,403 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2021-12-18 04:23:21,403 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-18 04:23:21,403 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-18 04:23:21,403 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-18 04:23:21,403 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-18 04:23:21,993 INFO L236 CfgBuilder]: Building ICFG [2021-12-18 04:23:21,996 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-18 04:23:22,110 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-18 04:24:10,812 INFO L277 CfgBuilder]: Performing block encoding [2021-12-18 04:24:10,836 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-18 04:24:10,849 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-18 04:24:10,855 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:24:10 BoogieIcfgContainer [2021-12-18 04:24:10,855 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-18 04:24:10,856 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-18 04:24:10,871 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-18 04:24:10,873 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-18 04:24:10,873 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.12 04:23:18" (1/3) ... [2021-12-18 04:24:10,874 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58d45f52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:24:10, skipping insertion in model container [2021-12-18 04:24:10,874 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:23:20" (2/3) ... [2021-12-18 04:24:10,874 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58d45f52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:24:10, skipping insertion in model container [2021-12-18 04:24:10,875 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:24:10" (3/3) ... [2021-12-18 04:24:10,875 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-12-18 04:24:10,880 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-18 04:24:10,880 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-18 04:24:10,931 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-18 04:24:10,936 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-18 04:24:10,936 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-18 04:24:10,963 INFO L276 IsEmpty]: Start isEmpty. Operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2021-12-18 04:24:10,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-18 04:24:10,977 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:10,978 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:10,978 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:10,982 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:10,983 INFO L85 PathProgramCache]: Analyzing trace with hash -601957003, now seen corresponding path program 1 times [2021-12-18 04:24:10,993 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:10,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [112832874] [2021-12-18 04:24:10,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:10,995 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:10,995 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:10,997 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:11,000 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-18 04:24:12,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:12,063 INFO L263 TraceCheckSpWp]: Trace formula consists of 1188 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 04:24:12,068 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:12,419 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-18 04:24:12,420 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:12,420 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:12,420 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [112832874] [2021-12-18 04:24:12,421 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [112832874] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:12,421 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:12,421 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 04:24:12,422 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [594840560] [2021-12-18 04:24:12,422 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:12,426 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 04:24:12,426 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:12,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 04:24:12,445 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:24:12,448 INFO L87 Difference]: Start difference. First operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:24:14,747 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:24:15,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:24:15,016 INFO L93 Difference]: Finished difference Result 3148 states and 4714 transitions. [2021-12-18 04:24:15,017 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 04:24:15,018 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-18 04:24:15,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:24:15,040 INFO L225 Difference]: With dead ends: 3148 [2021-12-18 04:24:15,040 INFO L226 Difference]: Without dead ends: 2066 [2021-12-18 04:24:15,048 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:24:15,052 INFO L933 BasicCegarLoop]: 1770 mSDtfsCounter, 1505 mSDsluCounter, 1560 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1505 SdHoareTripleChecker+Valid, 3330 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2021-12-18 04:24:15,054 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1505 Valid, 3330 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 1 Unknown, 0 Unchecked, 2.4s Time] [2021-12-18 04:24:15,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2066 states. [2021-12-18 04:24:15,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2066 to 2066. [2021-12-18 04:24:15,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2066 states, 1626 states have (on average 1.4317343173431734) internal successors, (2328), 1636 states have internal predecessors, (2328), 363 states have call successors, (363), 77 states have call predecessors, (363), 76 states have return successors, (362), 360 states have call predecessors, (362), 362 states have call successors, (362) [2021-12-18 04:24:15,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2066 states to 2066 states and 3053 transitions. [2021-12-18 04:24:15,189 INFO L78 Accepts]: Start accepts. Automaton has 2066 states and 3053 transitions. Word has length 46 [2021-12-18 04:24:15,189 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:24:15,189 INFO L470 AbstractCegarLoop]: Abstraction has 2066 states and 3053 transitions. [2021-12-18 04:24:15,190 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:24:15,190 INFO L276 IsEmpty]: Start isEmpty. Operand 2066 states and 3053 transitions. [2021-12-18 04:24:15,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-18 04:24:15,195 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:15,195 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:15,243 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-18 04:24:15,413 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:15,413 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:15,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:15,414 INFO L85 PathProgramCache]: Analyzing trace with hash -1981556391, now seen corresponding path program 1 times [2021-12-18 04:24:15,416 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:15,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1107567914] [2021-12-18 04:24:15,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:15,418 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:15,418 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:15,431 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:15,433 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-18 04:24:16,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:17,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 1570 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 04:24:17,097 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:17,703 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-18 04:24:17,704 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:17,704 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:17,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1107567914] [2021-12-18 04:24:17,704 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1107567914] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:17,704 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:17,704 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:24:17,704 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466979583] [2021-12-18 04:24:17,704 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:17,705 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:24:17,706 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:17,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:24:17,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:24:17,706 INFO L87 Difference]: Start difference. First operand 2066 states and 3053 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:24:18,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:24:18,376 INFO L93 Difference]: Finished difference Result 6171 states and 9137 transitions. [2021-12-18 04:24:18,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:24:18,377 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-12-18 04:24:18,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:24:18,398 INFO L225 Difference]: With dead ends: 6171 [2021-12-18 04:24:18,398 INFO L226 Difference]: Without dead ends: 4107 [2021-12-18 04:24:18,406 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:24:18,407 INFO L933 BasicCegarLoop]: 1782 mSDtfsCounter, 1533 mSDsluCounter, 5099 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1533 SdHoareTripleChecker+Valid, 6881 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-18 04:24:18,407 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1533 Valid, 6881 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-18 04:24:18,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4107 states. [2021-12-18 04:24:18,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4107 to 4107. [2021-12-18 04:24:18,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4107 states, 3233 states have (on average 1.4327250231982678) internal successors, (4632), 3253 states have internal predecessors, (4632), 721 states have call successors, (721), 153 states have call predecessors, (721), 152 states have return successors, (726), 716 states have call predecessors, (726), 720 states have call successors, (726) [2021-12-18 04:24:18,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4107 states to 4107 states and 6079 transitions. [2021-12-18 04:24:18,577 INFO L78 Accepts]: Start accepts. Automaton has 4107 states and 6079 transitions. Word has length 46 [2021-12-18 04:24:18,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:24:18,577 INFO L470 AbstractCegarLoop]: Abstraction has 4107 states and 6079 transitions. [2021-12-18 04:24:18,577 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:24:18,577 INFO L276 IsEmpty]: Start isEmpty. Operand 4107 states and 6079 transitions. [2021-12-18 04:24:18,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2021-12-18 04:24:18,587 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:18,587 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:18,647 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-18 04:24:18,807 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:18,808 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:18,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:18,809 INFO L85 PathProgramCache]: Analyzing trace with hash -642422905, now seen corresponding path program 1 times [2021-12-18 04:24:18,810 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:18,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1363583282] [2021-12-18 04:24:18,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:18,810 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:18,810 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:18,823 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:18,854 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-18 04:24:20,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:20,417 INFO L263 TraceCheckSpWp]: Trace formula consists of 1944 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 04:24:20,422 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:21,193 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-18 04:24:21,193 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:21,193 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:21,193 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1363583282] [2021-12-18 04:24:21,193 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1363583282] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:21,193 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:21,194 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 04:24:21,194 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [908017484] [2021-12-18 04:24:21,194 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:21,194 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 04:24:21,194 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:21,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 04:24:21,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:24:21,195 INFO L87 Difference]: Start difference. First operand 4107 states and 6079 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-18 04:24:23,864 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:24:25,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:24:25,746 INFO L93 Difference]: Finished difference Result 6853 states and 10078 transitions. [2021-12-18 04:24:25,746 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 04:24:25,746 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 103 [2021-12-18 04:24:25,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:24:25,762 INFO L225 Difference]: With dead ends: 6853 [2021-12-18 04:24:25,762 INFO L226 Difference]: Without dead ends: 2758 [2021-12-18 04:24:25,776 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:24:25,781 INFO L933 BasicCegarLoop]: 1595 mSDtfsCounter, 338 mSDsluCounter, 1484 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 3079 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.5s IncrementalHoareTripleChecker+Time [2021-12-18 04:24:25,783 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [338 Valid, 3079 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 53 Invalid, 1 Unknown, 0 Unchecked, 4.5s Time] [2021-12-18 04:24:25,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2758 states. [2021-12-18 04:24:25,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2758 to 2741. [2021-12-18 04:24:25,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2741 states, 2177 states have (on average 1.4244372990353698) internal successors, (3101), 2189 states have internal predecessors, (3101), 446 states have call successors, (446), 118 states have call predecessors, (446), 117 states have return successors, (448), 441 states have call predecessors, (448), 445 states have call successors, (448) [2021-12-18 04:24:25,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2741 states to 2741 states and 3995 transitions. [2021-12-18 04:24:25,872 INFO L78 Accepts]: Start accepts. Automaton has 2741 states and 3995 transitions. Word has length 103 [2021-12-18 04:24:25,874 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:24:25,874 INFO L470 AbstractCegarLoop]: Abstraction has 2741 states and 3995 transitions. [2021-12-18 04:24:25,874 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-18 04:24:25,874 INFO L276 IsEmpty]: Start isEmpty. Operand 2741 states and 3995 transitions. [2021-12-18 04:24:25,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2021-12-18 04:24:25,881 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:25,881 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:25,926 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-12-18 04:24:26,091 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:26,092 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:26,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:26,092 INFO L85 PathProgramCache]: Analyzing trace with hash 96929181, now seen corresponding path program 1 times [2021-12-18 04:24:26,093 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:26,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [261564988] [2021-12-18 04:24:26,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:26,093 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:26,094 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:26,101 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:26,114 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-18 04:24:27,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:27,879 INFO L263 TraceCheckSpWp]: Trace formula consists of 2056 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-18 04:24:27,883 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:28,774 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-18 04:24:28,774 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:28,774 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:28,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [261564988] [2021-12-18 04:24:28,774 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [261564988] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:28,774 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:28,775 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:24:28,775 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [411731396] [2021-12-18 04:24:28,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:28,775 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:24:28,775 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:28,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:24:28,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:24:28,776 INFO L87 Difference]: Start difference. First operand 2741 states and 3995 transitions. Second operand has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-18 04:24:29,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:24:29,143 INFO L93 Difference]: Finished difference Result 5276 states and 7721 transitions. [2021-12-18 04:24:29,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:24:29,144 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2021-12-18 04:24:29,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:24:29,154 INFO L225 Difference]: With dead ends: 5276 [2021-12-18 04:24:29,154 INFO L226 Difference]: Without dead ends: 2757 [2021-12-18 04:24:29,159 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:24:29,162 INFO L933 BasicCegarLoop]: 1552 mSDtfsCounter, 2 mSDsluCounter, 4651 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 6203 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:24:29,176 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 6203 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-18 04:24:29,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2757 states. [2021-12-18 04:24:29,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2757 to 2751. [2021-12-18 04:24:29,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2751 states, 2184 states have (on average 1.4230769230769231) internal successors, (3108), 2197 states have internal predecessors, (3108), 446 states have call successors, (446), 118 states have call predecessors, (446), 120 states have return successors, (459), 443 states have call predecessors, (459), 445 states have call successors, (459) [2021-12-18 04:24:29,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2751 states to 2751 states and 4013 transitions. [2021-12-18 04:24:29,296 INFO L78 Accepts]: Start accepts. Automaton has 2751 states and 4013 transitions. Word has length 144 [2021-12-18 04:24:29,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:24:29,298 INFO L470 AbstractCegarLoop]: Abstraction has 2751 states and 4013 transitions. [2021-12-18 04:24:29,298 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-12-18 04:24:29,298 INFO L276 IsEmpty]: Start isEmpty. Operand 2751 states and 4013 transitions. [2021-12-18 04:24:29,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-12-18 04:24:29,309 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:29,309 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:29,386 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-12-18 04:24:29,535 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:29,535 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:29,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:29,536 INFO L85 PathProgramCache]: Analyzing trace with hash 36910958, now seen corresponding path program 1 times [2021-12-18 04:24:29,538 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:29,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1080040364] [2021-12-18 04:24:29,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:29,538 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:29,538 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:29,543 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:29,545 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-18 04:24:31,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:31,559 INFO L263 TraceCheckSpWp]: Trace formula consists of 2082 conjuncts, 24 conjunts are in the unsatisfiable core [2021-12-18 04:24:31,563 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:33,781 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-12-18 04:24:33,781 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:33,781 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:33,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1080040364] [2021-12-18 04:24:33,781 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1080040364] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:33,781 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:33,781 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-18 04:24:33,781 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102435155] [2021-12-18 04:24:33,782 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:33,783 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-18 04:24:33,783 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:33,784 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-18 04:24:33,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2021-12-18 04:24:33,784 INFO L87 Difference]: Start difference. First operand 2751 states and 4013 transitions. Second operand has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2021-12-18 04:24:39,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:24:39,113 INFO L93 Difference]: Finished difference Result 6653 states and 9907 transitions. [2021-12-18 04:24:39,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-18 04:24:39,114 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) Word has length 151 [2021-12-18 04:24:39,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:24:39,155 INFO L225 Difference]: With dead ends: 6653 [2021-12-18 04:24:39,156 INFO L226 Difference]: Without dead ends: 4124 [2021-12-18 04:24:39,173 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 154 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2021-12-18 04:24:39,174 INFO L933 BasicCegarLoop]: 2399 mSDtfsCounter, 815 mSDsluCounter, 25417 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 949 SdHoareTripleChecker+Valid, 27816 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2021-12-18 04:24:39,174 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [949 Valid, 27816 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 4.6s Time] [2021-12-18 04:24:39,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4124 states. [2021-12-18 04:24:39,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4124 to 2763. [2021-12-18 04:24:39,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4204286365709073) internal successors, (3115), 2205 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:24:39,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4025 transitions. [2021-12-18 04:24:39,327 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4025 transitions. Word has length 151 [2021-12-18 04:24:39,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:24:39,329 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4025 transitions. [2021-12-18 04:24:39,329 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2021-12-18 04:24:39,329 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4025 transitions. [2021-12-18 04:24:39,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-18 04:24:39,335 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:39,336 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:39,382 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-12-18 04:24:39,559 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:39,560 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:39,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:39,561 INFO L85 PathProgramCache]: Analyzing trace with hash 1511771000, now seen corresponding path program 1 times [2021-12-18 04:24:39,563 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:39,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [443422767] [2021-12-18 04:24:39,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:39,563 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:39,563 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:39,571 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:39,573 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-18 04:24:42,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:42,160 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-18 04:24:42,165 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:43,306 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2021-12-18 04:24:43,306 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:43,306 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:43,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [443422767] [2021-12-18 04:24:43,306 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [443422767] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:43,306 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:43,306 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:24:43,306 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1345588194] [2021-12-18 04:24:43,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:43,307 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:24:43,307 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:43,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:24:43,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:24:43,307 INFO L87 Difference]: Start difference. First operand 2763 states and 4025 transitions. Second operand has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-18 04:24:47,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:24:47,294 INFO L93 Difference]: Finished difference Result 6577 states and 9760 transitions. [2021-12-18 04:24:47,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:24:47,295 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-12-18 04:24:47,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:24:47,309 INFO L225 Difference]: With dead ends: 6577 [2021-12-18 04:24:47,309 INFO L226 Difference]: Without dead ends: 4036 [2021-12-18 04:24:47,315 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:24:47,315 INFO L933 BasicCegarLoop]: 2259 mSDtfsCounter, 770 mSDsluCounter, 8119 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 10378 SdHoareTripleChecker+Invalid, 330 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2021-12-18 04:24:47,316 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [897 Valid, 10378 Invalid, 330 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2021-12-18 04:24:47,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4036 states. [2021-12-18 04:24:47,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4036 to 2763. [2021-12-18 04:24:47,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4195166438668492) internal successors, (3113), 2205 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:24:47,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4023 transitions. [2021-12-18 04:24:47,410 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4023 transitions. Word has length 190 [2021-12-18 04:24:47,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:24:47,410 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4023 transitions. [2021-12-18 04:24:47,411 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-18 04:24:47,411 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4023 transitions. [2021-12-18 04:24:47,415 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-18 04:24:47,415 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:47,415 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:47,455 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-12-18 04:24:47,632 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:47,632 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:47,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:47,633 INFO L85 PathProgramCache]: Analyzing trace with hash -1944162634, now seen corresponding path program 1 times [2021-12-18 04:24:47,634 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:47,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2064305192] [2021-12-18 04:24:47,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:47,634 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:47,634 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:47,635 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:47,636 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-18 04:24:49,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:50,117 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 14 conjunts are in the unsatisfiable core [2021-12-18 04:24:50,123 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:51,156 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-18 04:24:51,156 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:51,156 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:51,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2064305192] [2021-12-18 04:24:51,156 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2064305192] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:51,156 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:51,156 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:24:51,156 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2136340224] [2021-12-18 04:24:51,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:51,157 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:24:51,157 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:51,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:24:51,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:24:51,157 INFO L87 Difference]: Start difference. First operand 2763 states and 4023 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-18 04:24:56,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:24:56,285 INFO L93 Difference]: Finished difference Result 6579 states and 9758 transitions. [2021-12-18 04:24:56,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:24:56,286 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-12-18 04:24:56,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:24:56,299 INFO L225 Difference]: With dead ends: 6579 [2021-12-18 04:24:56,299 INFO L226 Difference]: Without dead ends: 4038 [2021-12-18 04:24:56,304 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:24:56,304 INFO L933 BasicCegarLoop]: 2275 mSDtfsCounter, 762 mSDsluCounter, 8176 mSDsCounter, 0 mSdLazyCounter, 331 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 888 SdHoareTripleChecker+Valid, 10451 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 331 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2021-12-18 04:24:56,304 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [888 Valid, 10451 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 331 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2021-12-18 04:24:56,307 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4038 states. [2021-12-18 04:24:56,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4038 to 2763. [2021-12-18 04:24:56,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4186046511627908) internal successors, (3111), 2205 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:24:56,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4021 transitions. [2021-12-18 04:24:56,370 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4021 transitions. Word has length 190 [2021-12-18 04:24:56,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:24:56,370 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4021 transitions. [2021-12-18 04:24:56,370 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-18 04:24:56,370 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4021 transitions. [2021-12-18 04:24:56,375 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-18 04:24:56,375 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:24:56,375 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:56,418 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-12-18 04:24:56,596 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:56,596 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:24:56,597 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:24:56,597 INFO L85 PathProgramCache]: Analyzing trace with hash 1858178488, now seen corresponding path program 1 times [2021-12-18 04:24:56,598 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:24:56,598 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [663557823] [2021-12-18 04:24:56,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:24:56,598 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:24:56,598 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:24:56,600 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:24:56,602 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-18 04:24:58,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:24:59,008 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-18 04:24:59,014 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:24:59,896 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 54 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-18 04:24:59,896 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:24:59,896 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:24:59,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [663557823] [2021-12-18 04:24:59,896 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [663557823] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:24:59,896 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:24:59,896 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:24:59,896 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1356642143] [2021-12-18 04:24:59,896 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:24:59,897 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:24:59,897 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:24:59,897 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:24:59,897 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:24:59,897 INFO L87 Difference]: Start difference. First operand 2763 states and 4021 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-18 04:25:02,186 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:25:06,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:25:06,416 INFO L93 Difference]: Finished difference Result 6687 states and 9929 transitions. [2021-12-18 04:25:06,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:25:06,418 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-12-18 04:25:06,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:25:06,438 INFO L225 Difference]: With dead ends: 6687 [2021-12-18 04:25:06,451 INFO L226 Difference]: Without dead ends: 4146 [2021-12-18 04:25:06,459 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:25:06,459 INFO L933 BasicCegarLoop]: 2354 mSDtfsCounter, 818 mSDsluCounter, 8425 mSDsCounter, 0 mSdLazyCounter, 350 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 955 SdHoareTripleChecker+Valid, 10779 SdHoareTripleChecker+Invalid, 350 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 350 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.3s IncrementalHoareTripleChecker+Time [2021-12-18 04:25:06,459 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [955 Valid, 10779 Invalid, 350 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 350 Invalid, 0 Unknown, 0 Unchecked, 6.3s Time] [2021-12-18 04:25:06,463 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4146 states. [2021-12-18 04:25:06,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4146 to 2763. [2021-12-18 04:25:06,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4176926584587324) internal successors, (3109), 2205 states have internal predecessors, (3109), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:25:06,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4019 transitions. [2021-12-18 04:25:06,587 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4019 transitions. Word has length 190 [2021-12-18 04:25:06,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:25:06,588 INFO L470 AbstractCegarLoop]: Abstraction has 2763 states and 4019 transitions. [2021-12-18 04:25:06,588 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-12-18 04:25:06,588 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4019 transitions. [2021-12-18 04:25:06,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-12-18 04:25:06,593 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:25:06,593 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:25:06,641 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-12-18 04:25:06,815 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:25:06,815 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:25:06,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:25:06,816 INFO L85 PathProgramCache]: Analyzing trace with hash -1757516554, now seen corresponding path program 1 times [2021-12-18 04:25:06,817 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:25:06,817 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1186696711] [2021-12-18 04:25:06,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:25:06,818 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:25:06,818 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:25:06,819 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:25:06,820 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-18 04:25:09,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:25:09,195 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-18 04:25:09,198 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:25:09,874 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2021-12-18 04:25:09,874 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:25:09,874 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:25:09,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1186696711] [2021-12-18 04:25:09,874 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1186696711] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:25:09,874 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:25:09,874 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-18 04:25:09,874 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1156833007] [2021-12-18 04:25:09,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:25:09,875 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-18 04:25:09,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:25:09,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-18 04:25:09,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-18 04:25:09,875 INFO L87 Difference]: Start difference. First operand 2763 states and 4019 transitions. Second operand has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:25:12,416 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:25:13,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:25:13,626 INFO L93 Difference]: Finished difference Result 7932 states and 11897 transitions. [2021-12-18 04:25:13,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-18 04:25:13,627 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 190 [2021-12-18 04:25:13,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:25:13,643 INFO L225 Difference]: With dead ends: 7932 [2021-12-18 04:25:13,644 INFO L226 Difference]: Without dead ends: 5391 [2021-12-18 04:25:13,649 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 188 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:25:13,650 INFO L933 BasicCegarLoop]: 2511 mSDtfsCounter, 1773 mSDsluCounter, 4068 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 192 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1885 SdHoareTripleChecker+Valid, 6579 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 192 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2021-12-18 04:25:13,650 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1885 Valid, 6579 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [192 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2021-12-18 04:25:13,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5391 states. [2021-12-18 04:25:13,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5391 to 2767. [2021-12-18 04:25:13,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2767 states, 2197 states have (on average 1.4169321802457897) internal successors, (3113), 2209 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:25:13,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2767 states to 2767 states and 4023 transitions. [2021-12-18 04:25:13,829 INFO L78 Accepts]: Start accepts. Automaton has 2767 states and 4023 transitions. Word has length 190 [2021-12-18 04:25:13,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:25:13,829 INFO L470 AbstractCegarLoop]: Abstraction has 2767 states and 4023 transitions. [2021-12-18 04:25:13,829 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:25:13,829 INFO L276 IsEmpty]: Start isEmpty. Operand 2767 states and 4023 transitions. [2021-12-18 04:25:13,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-18 04:25:13,834 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:25:13,834 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:25:13,882 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-12-18 04:25:14,055 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:25:14,056 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:25:14,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:25:14,056 INFO L85 PathProgramCache]: Analyzing trace with hash 632306147, now seen corresponding path program 1 times [2021-12-18 04:25:14,057 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:25:14,057 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1954839012] [2021-12-18 04:25:14,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:25:14,058 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:25:14,058 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:25:14,060 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:25:14,098 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-18 04:25:16,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:25:16,577 INFO L263 TraceCheckSpWp]: Trace formula consists of 2496 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 04:25:16,581 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:25:17,385 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-12-18 04:25:17,385 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:25:17,385 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:25:17,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1954839012] [2021-12-18 04:25:17,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1954839012] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:25:17,386 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:25:17,386 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 04:25:17,386 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1771740531] [2021-12-18 04:25:17,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:25:17,386 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 04:25:17,386 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:25:17,386 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 04:25:17,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:25:17,387 INFO L87 Difference]: Start difference. First operand 2767 states and 4023 transitions. Second operand has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-18 04:25:19,711 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:25:19,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:25:19,737 INFO L93 Difference]: Finished difference Result 5314 states and 7742 transitions. [2021-12-18 04:25:19,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 04:25:19,754 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2021-12-18 04:25:19,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:25:19,763 INFO L225 Difference]: With dead ends: 5314 [2021-12-18 04:25:19,763 INFO L226 Difference]: Without dead ends: 2769 [2021-12-18 04:25:19,767 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:25:19,768 INFO L933 BasicCegarLoop]: 1550 mSDtfsCounter, 0 mSDsluCounter, 1545 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 3095 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2021-12-18 04:25:19,768 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 3095 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 1 Unknown, 0 Unchecked, 2.3s Time] [2021-12-18 04:25:19,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2769 states. [2021-12-18 04:25:19,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2769 to 2769. [2021-12-18 04:25:19,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.4165529786266484) internal successors, (3115), 2211 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:25:19,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4025 transitions. [2021-12-18 04:25:19,826 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4025 transitions. Word has length 200 [2021-12-18 04:25:19,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:25:19,826 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4025 transitions. [2021-12-18 04:25:19,826 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-18 04:25:19,826 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4025 transitions. [2021-12-18 04:25:19,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-18 04:25:19,831 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:25:19,831 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:25:19,878 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-12-18 04:25:20,048 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:25:20,048 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:25:20,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:25:20,049 INFO L85 PathProgramCache]: Analyzing trace with hash 1848459873, now seen corresponding path program 1 times [2021-12-18 04:25:20,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:25:20,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1458908987] [2021-12-18 04:25:20,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:25:20,050 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:25:20,050 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:25:20,051 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:25:20,053 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-18 04:25:22,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:25:22,670 INFO L263 TraceCheckSpWp]: Trace formula consists of 2498 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-18 04:25:22,683 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:25:23,688 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-12-18 04:25:23,689 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:25:23,689 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:25:23,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1458908987] [2021-12-18 04:25:23,689 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1458908987] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:25:23,689 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:25:23,689 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:25:23,689 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1034602720] [2021-12-18 04:25:23,689 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:25:23,689 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:25:23,689 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:25:23,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:25:23,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:25:23,691 INFO L87 Difference]: Start difference. First operand 2769 states and 4025 transitions. Second operand has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-18 04:25:29,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:25:29,546 INFO L93 Difference]: Finished difference Result 6947 states and 10330 transitions. [2021-12-18 04:25:29,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:25:29,547 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) Word has length 200 [2021-12-18 04:25:29,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:25:29,566 INFO L225 Difference]: With dead ends: 6947 [2021-12-18 04:25:29,566 INFO L226 Difference]: Without dead ends: 4400 [2021-12-18 04:25:29,572 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 195 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:25:29,573 INFO L933 BasicCegarLoop]: 2423 mSDtfsCounter, 794 mSDsluCounter, 8823 mSDsCounter, 0 mSdLazyCounter, 412 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 929 SdHoareTripleChecker+Valid, 11246 SdHoareTripleChecker+Invalid, 412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 412 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2021-12-18 04:25:29,573 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [929 Valid, 11246 Invalid, 412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 412 Invalid, 0 Unknown, 0 Unchecked, 5.6s Time] [2021-12-18 04:25:29,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4400 states. [2021-12-18 04:25:29,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4400 to 2769. [2021-12-18 04:25:29,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.415643474306503) internal successors, (3113), 2211 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:25:29,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4023 transitions. [2021-12-18 04:25:29,649 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4023 transitions. Word has length 200 [2021-12-18 04:25:29,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:25:29,650 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4023 transitions. [2021-12-18 04:25:29,650 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-18 04:25:29,650 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4023 transitions. [2021-12-18 04:25:29,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-18 04:25:29,654 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:25:29,655 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:25:29,700 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-12-18 04:25:29,869 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:25:29,870 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:25:29,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:25:29,870 INFO L85 PathProgramCache]: Analyzing trace with hash 2050283807, now seen corresponding path program 1 times [2021-12-18 04:25:29,872 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:25:29,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1093102684] [2021-12-18 04:25:29,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:25:29,872 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:25:29,872 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:25:29,880 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:25:29,931 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-18 04:25:32,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:25:32,744 INFO L263 TraceCheckSpWp]: Trace formula consists of 2498 conjuncts, 14 conjunts are in the unsatisfiable core [2021-12-18 04:25:32,750 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:25:33,755 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-18 04:25:33,755 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:25:33,755 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:25:33,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1093102684] [2021-12-18 04:25:33,755 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1093102684] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:25:33,756 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:25:33,756 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:25:33,756 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1931922364] [2021-12-18 04:25:33,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:25:33,756 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:25:33,756 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:25:33,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:25:33,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:25:33,757 INFO L87 Difference]: Start difference. First operand 2769 states and 4023 transitions. Second operand has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-18 04:25:38,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:25:38,200 INFO L93 Difference]: Finished difference Result 6655 states and 9852 transitions. [2021-12-18 04:25:38,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-18 04:25:38,201 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) Word has length 200 [2021-12-18 04:25:38,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:25:38,228 INFO L225 Difference]: With dead ends: 6655 [2021-12-18 04:25:38,229 INFO L226 Difference]: Without dead ends: 4108 [2021-12-18 04:25:38,235 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 195 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2021-12-18 04:25:38,256 INFO L933 BasicCegarLoop]: 2310 mSDtfsCounter, 757 mSDsluCounter, 8315 mSDsCounter, 0 mSdLazyCounter, 363 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 882 SdHoareTripleChecker+Valid, 10625 SdHoareTripleChecker+Invalid, 365 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 363 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2021-12-18 04:25:38,257 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [882 Valid, 10625 Invalid, 365 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 363 Invalid, 0 Unknown, 0 Unchecked, 4.0s Time] [2021-12-18 04:25:38,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4108 states. [2021-12-18 04:25:38,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4108 to 2769. [2021-12-18 04:25:38,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.4147339699863575) internal successors, (3111), 2211 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:25:38,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4021 transitions. [2021-12-18 04:25:38,346 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4021 transitions. Word has length 200 [2021-12-18 04:25:38,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:25:38,346 INFO L470 AbstractCegarLoop]: Abstraction has 2769 states and 4021 transitions. [2021-12-18 04:25:38,346 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-12-18 04:25:38,346 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4021 transitions. [2021-12-18 04:25:38,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-12-18 04:25:38,351 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:25:38,351 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:25:38,400 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-12-18 04:25:38,566 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:25:38,566 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:25:38,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:25:38,567 INFO L85 PathProgramCache]: Analyzing trace with hash 21697697, now seen corresponding path program 1 times [2021-12-18 04:25:38,569 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:25:38,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2027304774] [2021-12-18 04:25:38,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:25:38,569 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:25:38,569 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:25:38,570 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:25:38,623 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-18 04:25:41,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:25:41,441 INFO L263 TraceCheckSpWp]: Trace formula consists of 2498 conjuncts, 24 conjunts are in the unsatisfiable core [2021-12-18 04:25:41,444 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:25:43,560 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2021-12-18 04:25:43,560 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:25:43,560 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:25:43,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2027304774] [2021-12-18 04:25:43,561 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2027304774] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:25:43,561 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:25:43,561 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-18 04:25:43,561 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31567859] [2021-12-18 04:25:43,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:25:43,561 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-18 04:25:43,561 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:25:43,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-18 04:25:43,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2021-12-18 04:25:43,562 INFO L87 Difference]: Start difference. First operand 2769 states and 4021 transitions. Second operand has 13 states, 13 states have (on average 9.76923076923077) internal successors, (127), 9 states have internal predecessors, (127), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) [2021-12-18 04:25:48,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:25:48,391 INFO L93 Difference]: Finished difference Result 6689 states and 9903 transitions. [2021-12-18 04:25:48,394 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-18 04:25:48,394 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 9.76923076923077) internal successors, (127), 9 states have internal predecessors, (127), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) Word has length 200 [2021-12-18 04:25:48,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:25:48,421 INFO L225 Difference]: With dead ends: 6689 [2021-12-18 04:25:48,422 INFO L226 Difference]: Without dead ends: 4142 [2021-12-18 04:25:48,429 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 189 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=39, Invalid=233, Unknown=0, NotChecked=0, Total=272 [2021-12-18 04:25:48,430 INFO L933 BasicCegarLoop]: 2388 mSDtfsCounter, 810 mSDsluCounter, 25303 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 945 SdHoareTripleChecker+Valid, 27691 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2021-12-18 04:25:48,430 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [945 Valid, 27691 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2021-12-18 04:25:48,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4142 states. [2021-12-18 04:25:48,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4142 to 2773. [2021-12-18 04:25:48,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2773 states, 2203 states have (on average 1.4139809350885157) internal successors, (3115), 2213 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 449 states have call predecessors, (464), 445 states have call successors, (464) [2021-12-18 04:25:48,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2773 states to 2773 states and 4025 transitions. [2021-12-18 04:25:48,527 INFO L78 Accepts]: Start accepts. Automaton has 2773 states and 4025 transitions. Word has length 200 [2021-12-18 04:25:48,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:25:48,528 INFO L470 AbstractCegarLoop]: Abstraction has 2773 states and 4025 transitions. [2021-12-18 04:25:48,528 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 9.76923076923077) internal successors, (127), 9 states have internal predecessors, (127), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) [2021-12-18 04:25:48,528 INFO L276 IsEmpty]: Start isEmpty. Operand 2773 states and 4025 transitions. [2021-12-18 04:25:48,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 203 [2021-12-18 04:25:48,533 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:25:48,533 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:25:48,607 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-12-18 04:25:48,747 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:25:48,748 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:25:48,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:25:48,749 INFO L85 PathProgramCache]: Analyzing trace with hash -1602293502, now seen corresponding path program 1 times [2021-12-18 04:25:48,750 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:25:48,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1394109172] [2021-12-18 04:25:48,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:25:48,751 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:25:48,751 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:25:48,752 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:25:48,758 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-18 04:25:51,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:25:51,259 INFO L263 TraceCheckSpWp]: Trace formula consists of 2317 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 04:25:51,262 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:25:52,116 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-12-18 04:25:52,116 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:25:52,116 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:25:52,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1394109172] [2021-12-18 04:25:52,116 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1394109172] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:25:52,116 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:25:52,116 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:25:52,116 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [328061605] [2021-12-18 04:25:52,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:25:52,117 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:25:52,117 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:25:52,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:25:52,117 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:25:52,117 INFO L87 Difference]: Start difference. First operand 2773 states and 4025 transitions. Second operand has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-18 04:25:53,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:25:53,378 INFO L93 Difference]: Finished difference Result 6607 states and 9776 transitions. [2021-12-18 04:25:53,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:25:53,392 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) Word has length 202 [2021-12-18 04:25:53,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:25:53,416 INFO L225 Difference]: With dead ends: 6607 [2021-12-18 04:25:53,416 INFO L226 Difference]: Without dead ends: 4056 [2021-12-18 04:25:53,427 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 201 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:25:53,428 INFO L933 BasicCegarLoop]: 2304 mSDtfsCounter, 581 mSDsluCounter, 6242 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 682 SdHoareTripleChecker+Valid, 8546 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-12-18 04:25:53,428 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [682 Valid, 8546 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-12-18 04:25:53,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4056 states. [2021-12-18 04:25:53,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4056 to 2781. [2021-12-18 04:25:53,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2781 states, 2209 states have (on average 1.412856496152105) internal successors, (3121), 2219 states have internal predecessors, (3121), 446 states have call successors, (446), 118 states have call predecessors, (446), 125 states have return successors, (468), 451 states have call predecessors, (468), 445 states have call successors, (468) [2021-12-18 04:25:53,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2781 states to 2781 states and 4035 transitions. [2021-12-18 04:25:53,521 INFO L78 Accepts]: Start accepts. Automaton has 2781 states and 4035 transitions. Word has length 202 [2021-12-18 04:25:53,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:25:53,522 INFO L470 AbstractCegarLoop]: Abstraction has 2781 states and 4035 transitions. [2021-12-18 04:25:53,522 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-18 04:25:53,522 INFO L276 IsEmpty]: Start isEmpty. Operand 2781 states and 4035 transitions. [2021-12-18 04:25:53,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 227 [2021-12-18 04:25:53,528 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:25:53,528 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:25:53,575 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Ended with exit code 0 [2021-12-18 04:25:53,751 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:25:53,752 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:25:53,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:25:53,752 INFO L85 PathProgramCache]: Analyzing trace with hash 1917943735, now seen corresponding path program 1 times [2021-12-18 04:25:53,753 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:25:53,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [766652456] [2021-12-18 04:25:53,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:25:53,754 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:25:53,754 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:25:53,755 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:25:53,755 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process Killed by 15