./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-18 04:20:43,262 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-18 04:20:43,264 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-18 04:20:43,294 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-18 04:20:43,296 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-18 04:20:43,298 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-18 04:20:43,299 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-18 04:20:43,300 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-18 04:20:43,302 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-18 04:20:43,304 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-18 04:20:43,304 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-18 04:20:43,305 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-18 04:20:43,305 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-18 04:20:43,306 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-18 04:20:43,306 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-18 04:20:43,307 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-18 04:20:43,308 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-18 04:20:43,308 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-18 04:20:43,309 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-18 04:20:43,310 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-18 04:20:43,311 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-18 04:20:43,312 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-18 04:20:43,313 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-18 04:20:43,314 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-18 04:20:43,315 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-18 04:20:43,316 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-18 04:20:43,316 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-18 04:20:43,316 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-18 04:20:43,317 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-18 04:20:43,317 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-18 04:20:43,317 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-18 04:20:43,318 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-18 04:20:43,319 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-18 04:20:43,320 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-18 04:20:43,323 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-18 04:20:43,323 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-18 04:20:43,323 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-18 04:20:43,324 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-18 04:20:43,324 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-18 04:20:43,325 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-18 04:20:43,325 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-18 04:20:43,326 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-18 04:20:43,346 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-18 04:20:43,348 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-18 04:20:43,349 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-18 04:20:43,349 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-18 04:20:43,350 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-18 04:20:43,350 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-18 04:20:43,350 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-18 04:20:43,350 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-18 04:20:43,350 INFO L138 SettingsManager]: * Use SBE=true [2021-12-18 04:20:43,350 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-18 04:20:43,351 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-18 04:20:43,351 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-18 04:20:43,351 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-18 04:20:43,352 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-18 04:20:43,352 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-18 04:20:43,352 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-18 04:20:43,352 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-18 04:20:43,352 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-18 04:20:43,352 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-18 04:20:43,352 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-18 04:20:43,352 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-18 04:20:43,353 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:20:43,353 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-18 04:20:43,353 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-18 04:20:43,353 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-18 04:20:43,353 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-18 04:20:43,353 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-18 04:20:43,354 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-18 04:20:43,354 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-18 04:20:43,354 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-18 04:20:43,355 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-18 04:20:43,355 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2021-12-18 04:20:43,559 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-18 04:20:43,574 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-18 04:20:43,575 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-18 04:20:43,576 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-18 04:20:43,576 INFO L275 PluginConnector]: CDTParser initialized [2021-12-18 04:20:43,577 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-18 04:20:43,631 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/44fca01cd/da34f2b9f1274e3eb58ece07aa5c9a98/FLAG0edab145e [2021-12-18 04:20:44,251 INFO L306 CDTParser]: Found 1 translation units. [2021-12-18 04:20:44,252 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-18 04:20:44,284 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/44fca01cd/da34f2b9f1274e3eb58ece07aa5c9a98/FLAG0edab145e [2021-12-18 04:20:44,671 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/44fca01cd/da34f2b9f1274e3eb58ece07aa5c9a98 [2021-12-18 04:20:44,673 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-18 04:20:44,674 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-18 04:20:44,675 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-18 04:20:44,675 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-18 04:20:44,678 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-18 04:20:44,678 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:20:44" (1/1) ... [2021-12-18 04:20:44,679 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7dc73d96 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:44, skipping insertion in model container [2021-12-18 04:20:44,679 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:20:44" (1/1) ... [2021-12-18 04:20:44,683 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-18 04:20:44,771 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 04:20:45,335 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-12-18 04:20:45,665 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:20:45,684 INFO L203 MainTranslator]: Completed pre-run [2021-12-18 04:20:45,787 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-12-18 04:20:45,889 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:20:45,952 INFO L208 MainTranslator]: Completed translation [2021-12-18 04:20:45,953 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45 WrapperNode [2021-12-18 04:20:45,953 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-18 04:20:45,954 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-18 04:20:45,954 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-18 04:20:45,954 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-18 04:20:45,958 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,004 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,126 INFO L137 Inliner]: procedures = 157, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2337 [2021-12-18 04:20:46,126 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-18 04:20:46,127 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-18 04:20:46,127 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-18 04:20:46,127 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-18 04:20:46,133 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,133 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,173 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,174 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,236 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,243 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,266 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,286 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-18 04:20:46,286 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-18 04:20:46,287 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-18 04:20:46,287 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-18 04:20:46,287 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (1/1) ... [2021-12-18 04:20:46,292 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:20:46,298 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 04:20:46,307 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-18 04:20:46,346 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-18 04:20:46,384 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-12-18 04:20:46,384 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-12-18 04:20:46,384 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:20:46,385 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:20:46,385 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-18 04:20:46,385 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2021-12-18 04:20:46,385 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2021-12-18 04:20:46,385 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2021-12-18 04:20:46,385 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2021-12-18 04:20:46,385 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2021-12-18 04:20:46,386 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2021-12-18 04:20:46,386 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-18 04:20:46,386 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-18 04:20:46,386 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-12-18 04:20:46,386 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-12-18 04:20:46,386 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-18 04:20:46,386 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-18 04:20:46,386 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-18 04:20:46,386 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-18 04:20:46,387 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-18 04:20:46,387 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-18 04:20:46,387 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-18 04:20:46,387 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-12-18 04:20:46,387 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-12-18 04:20:46,387 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-18 04:20:46,387 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-18 04:20:46,387 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-18 04:20:46,388 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-18 04:20:46,388 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-18 04:20:46,388 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-18 04:20:46,388 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-18 04:20:46,388 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-18 04:20:46,388 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-18 04:20:46,388 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-18 04:20:46,388 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-12-18 04:20:46,389 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-12-18 04:20:46,389 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-18 04:20:46,389 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-18 04:20:46,389 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-18 04:20:46,389 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-18 04:20:46,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-18 04:20:46,390 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2021-12-18 04:20:46,390 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2021-12-18 04:20:46,390 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-18 04:20:46,390 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-18 04:20:46,390 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-12-18 04:20:46,390 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-12-18 04:20:46,390 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-18 04:20:46,390 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-18 04:20:46,391 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-12-18 04:20:46,391 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-12-18 04:20:46,391 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-18 04:20:46,391 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-18 04:20:46,391 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-18 04:20:46,392 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-18 04:20:46,392 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-18 04:20:46,392 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-18 04:20:46,393 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-18 04:20:46,393 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-18 04:20:46,393 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-12-18 04:20:46,394 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-12-18 04:20:46,394 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-18 04:20:46,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-18 04:20:46,394 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-12-18 04:20:46,394 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-12-18 04:20:46,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-18 04:20:46,395 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-12-18 04:20:46,395 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-12-18 04:20:46,395 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-12-18 04:20:46,395 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-12-18 04:20:46,395 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-18 04:20:46,395 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-18 04:20:46,396 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-18 04:20:46,396 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-18 04:20:46,396 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-18 04:20:46,396 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-18 04:20:46,396 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2021-12-18 04:20:46,396 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2021-12-18 04:20:46,396 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-18 04:20:46,397 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-12-18 04:20:46,397 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-12-18 04:20:46,397 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-12-18 04:20:46,397 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-12-18 04:20:46,397 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-18 04:20:46,397 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-18 04:20:46,397 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-18 04:20:46,397 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-18 04:20:46,398 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-18 04:20:46,398 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-18 04:20:46,398 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-18 04:20:46,398 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-18 04:20:46,398 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-12-18 04:20:46,399 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-12-18 04:20:46,767 INFO L236 CfgBuilder]: Building ICFG [2021-12-18 04:20:46,768 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-18 04:20:46,898 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-18 04:20:49,998 INFO L277 CfgBuilder]: Performing block encoding [2021-12-18 04:20:50,005 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-18 04:20:50,006 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-18 04:20:50,008 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:20:50 BoogieIcfgContainer [2021-12-18 04:20:50,008 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-18 04:20:50,009 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-18 04:20:50,009 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-18 04:20:50,011 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-18 04:20:50,011 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.12 04:20:44" (1/3) ... [2021-12-18 04:20:50,012 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18c99ed7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:20:50, skipping insertion in model container [2021-12-18 04:20:50,012 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:20:45" (2/3) ... [2021-12-18 04:20:50,012 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18c99ed7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:20:50, skipping insertion in model container [2021-12-18 04:20:50,012 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:20:50" (3/3) ... [2021-12-18 04:20:50,013 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-18 04:20:50,017 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-18 04:20:50,017 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-18 04:20:50,047 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-18 04:20:50,051 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-18 04:20:50,052 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-18 04:20:50,069 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2021-12-18 04:20:50,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-12-18 04:20:50,075 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:20:50,076 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:20:50,076 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:20:50,080 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:20:50,080 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2021-12-18 04:20:50,097 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:20:50,098 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [708332993] [2021-12-18 04:20:50,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:20:50,098 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:20:50,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:50,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:20:50,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:50,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:20:50,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:50,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:20:50,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:50,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:20:50,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:50,450 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-18 04:20:50,451 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:20:50,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [708332993] [2021-12-18 04:20:50,451 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [708332993] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:20:50,451 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:20:50,452 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:20:50,453 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1784828626] [2021-12-18 04:20:50,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:20:50,456 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:20:50,456 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:20:50,471 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:20:50,472 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:20:50,474 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:20:52,738 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:20:54,761 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:20:56,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:20:56,811 INFO L93 Difference]: Finished difference Result 2121 states and 3115 transitions. [2021-12-18 04:20:56,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 04:20:56,813 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2021-12-18 04:20:56,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:20:56,845 INFO L225 Difference]: With dead ends: 2121 [2021-12-18 04:20:56,846 INFO L226 Difference]: Without dead ends: 1432 [2021-12-18 04:20:56,852 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-18 04:20:56,854 INFO L933 BasicCegarLoop]: 1045 mSDtfsCounter, 1384 mSDsluCounter, 1779 mSDsCounter, 0 mSdLazyCounter, 961 mSolverCounterSat, 687 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1492 SdHoareTripleChecker+Valid, 2824 SdHoareTripleChecker+Invalid, 1650 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 687 IncrementalHoareTripleChecker+Valid, 961 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:20:56,855 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1492 Valid, 2824 Invalid, 1650 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [687 Valid, 961 Invalid, 2 Unknown, 0 Unchecked, 6.2s Time] [2021-12-18 04:20:56,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1432 states. [2021-12-18 04:20:56,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1432 to 1286. [2021-12-18 04:20:56,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1286 states, 957 states have (on average 1.3657262277951934) internal successors, (1307), 971 states have internal predecessors, (1307), 256 states have call successors, (256), 73 states have call predecessors, (256), 72 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2021-12-18 04:20:56,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1286 states to 1286 states and 1818 transitions. [2021-12-18 04:20:56,980 INFO L78 Accepts]: Start accepts. Automaton has 1286 states and 1818 transitions. Word has length 45 [2021-12-18 04:20:56,981 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:20:56,981 INFO L470 AbstractCegarLoop]: Abstraction has 1286 states and 1818 transitions. [2021-12-18 04:20:56,981 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:20:56,981 INFO L276 IsEmpty]: Start isEmpty. Operand 1286 states and 1818 transitions. [2021-12-18 04:20:56,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-18 04:20:56,990 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:20:56,990 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:20:56,990 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-18 04:20:56,991 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:20:56,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:20:56,998 INFO L85 PathProgramCache]: Analyzing trace with hash -1828543170, now seen corresponding path program 1 times [2021-12-18 04:20:56,999 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:20:56,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000910336] [2021-12-18 04:20:56,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:20:56,999 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:20:57,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:57,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:20:57,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:57,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:20:57,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:57,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:20:57,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:57,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:20:57,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:57,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-18 04:20:57,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:57,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-18 04:20:57,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:20:57,334 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-18 04:20:57,334 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:20:57,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000910336] [2021-12-18 04:20:57,335 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000910336] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:20:57,335 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:20:57,335 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-18 04:20:57,335 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [154158989] [2021-12-18 04:20:57,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:20:57,336 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-18 04:20:57,339 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:20:57,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-18 04:20:57,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:20:57,340 INFO L87 Difference]: Start difference. First operand 1286 states and 1818 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-18 04:20:59,544 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:01,567 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:03,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:03,858 INFO L93 Difference]: Finished difference Result 4123 states and 5934 transitions. [2021-12-18 04:21:03,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-18 04:21:03,859 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2021-12-18 04:21:03,859 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:03,873 INFO L225 Difference]: With dead ends: 4123 [2021-12-18 04:21:03,873 INFO L226 Difference]: Without dead ends: 2839 [2021-12-18 04:21:03,877 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2021-12-18 04:21:03,878 INFO L933 BasicCegarLoop]: 1090 mSDtfsCounter, 1367 mSDsluCounter, 3878 mSDsCounter, 0 mSdLazyCounter, 1320 mSolverCounterSat, 663 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1475 SdHoareTripleChecker+Valid, 4968 SdHoareTripleChecker+Invalid, 1985 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 663 IncrementalHoareTripleChecker+Valid, 1320 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.3s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:03,878 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1475 Valid, 4968 Invalid, 1985 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [663 Valid, 1320 Invalid, 2 Unknown, 0 Unchecked, 6.3s Time] [2021-12-18 04:21:03,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2839 states. [2021-12-18 04:21:03,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2839 to 2591. [2021-12-18 04:21:03,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2591 states, 1927 states have (on average 1.3642968344577062) internal successors, (2629), 1963 states have internal predecessors, (2629), 507 states have call successors, (507), 145 states have call predecessors, (507), 156 states have return successors, (561), 498 states have call predecessors, (561), 506 states have call successors, (561) [2021-12-18 04:21:03,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2591 states to 2591 states and 3697 transitions. [2021-12-18 04:21:03,989 INFO L78 Accepts]: Start accepts. Automaton has 2591 states and 3697 transitions. Word has length 63 [2021-12-18 04:21:03,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:03,990 INFO L470 AbstractCegarLoop]: Abstraction has 2591 states and 3697 transitions. [2021-12-18 04:21:03,990 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-18 04:21:03,990 INFO L276 IsEmpty]: Start isEmpty. Operand 2591 states and 3697 transitions. [2021-12-18 04:21:03,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-18 04:21:03,997 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:03,998 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:03,998 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-18 04:21:03,998 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:03,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:03,999 INFO L85 PathProgramCache]: Analyzing trace with hash -1080085425, now seen corresponding path program 1 times [2021-12-18 04:21:03,999 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:03,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1576362114] [2021-12-18 04:21:03,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:03,999 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:04,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:04,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:04,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:04,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:21:04,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-18 04:21:04,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:04,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-18 04:21:04,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:04,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:04,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2021-12-18 04:21:04,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-18 04:21:04,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:04,224 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-12-18 04:21:04,225 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:04,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1576362114] [2021-12-18 04:21:04,226 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1576362114] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:04,227 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:04,227 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-18 04:21:04,228 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [999916167] [2021-12-18 04:21:04,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:04,229 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-18 04:21:04,229 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:04,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-18 04:21:04,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:21:04,230 INFO L87 Difference]: Start difference. First operand 2591 states and 3697 transitions. Second operand has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-18 04:21:06,383 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:08,409 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:10,429 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:12,907 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:14,929 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:16,947 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:18,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:18,903 INFO L93 Difference]: Finished difference Result 7632 states and 10965 transitions. [2021-12-18 04:21:18,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-18 04:21:18,903 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 113 [2021-12-18 04:21:18,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:18,923 INFO L225 Difference]: With dead ends: 7632 [2021-12-18 04:21:18,924 INFO L226 Difference]: Without dead ends: 5053 [2021-12-18 04:21:18,929 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-18 04:21:18,933 INFO L933 BasicCegarLoop]: 1037 mSDtfsCounter, 1308 mSDsluCounter, 2363 mSDsCounter, 0 mSdLazyCounter, 1329 mSolverCounterSat, 882 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1409 SdHoareTripleChecker+Valid, 3400 SdHoareTripleChecker+Invalid, 2217 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 882 IncrementalHoareTripleChecker+Valid, 1329 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.5s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:18,934 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1409 Valid, 3400 Invalid, 2217 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [882 Valid, 1329 Invalid, 6 Unknown, 0 Unchecked, 14.5s Time] [2021-12-18 04:21:18,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5053 states. [2021-12-18 04:21:19,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5053 to 4275. [2021-12-18 04:21:19,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4275 states, 3162 states have (on average 1.3488298545224542) internal successors, (4265), 3224 states have internal predecessors, (4265), 829 states have call successors, (829), 262 states have call predecessors, (829), 283 states have return successors, (918), 816 states have call predecessors, (918), 828 states have call successors, (918) [2021-12-18 04:21:19,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4275 states to 4275 states and 6012 transitions. [2021-12-18 04:21:19,079 INFO L78 Accepts]: Start accepts. Automaton has 4275 states and 6012 transitions. Word has length 113 [2021-12-18 04:21:19,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:19,080 INFO L470 AbstractCegarLoop]: Abstraction has 4275 states and 6012 transitions. [2021-12-18 04:21:19,080 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-18 04:21:19,081 INFO L276 IsEmpty]: Start isEmpty. Operand 4275 states and 6012 transitions. [2021-12-18 04:21:19,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2021-12-18 04:21:19,090 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:19,090 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:19,090 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-18 04:21:19,090 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:19,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:19,091 INFO L85 PathProgramCache]: Analyzing trace with hash 265725666, now seen corresponding path program 1 times [2021-12-18 04:21:19,091 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:19,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [174070407] [2021-12-18 04:21:19,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:19,091 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:19,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:19,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:19,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:19,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:21:19,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-18 04:21:19,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:19,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-18 04:21:19,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-18 04:21:19,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-18 04:21:19,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-18 04:21:19,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:19,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:19,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-18 04:21:19,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-18 04:21:19,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:19,330 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-12-18 04:21:19,330 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:19,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [174070407] [2021-12-18 04:21:19,331 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [174070407] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:19,331 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:19,331 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-18 04:21:19,331 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1532915674] [2021-12-18 04:21:19,331 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:19,332 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-18 04:21:19,333 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:19,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-18 04:21:19,333 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:21:19,333 INFO L87 Difference]: Start difference. First operand 4275 states and 6012 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:21:21,472 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:23,489 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:25,774 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:27,797 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:29,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:29,959 INFO L93 Difference]: Finished difference Result 10577 states and 14962 transitions. [2021-12-18 04:21:29,961 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-18 04:21:29,961 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 130 [2021-12-18 04:21:29,962 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:30,007 INFO L225 Difference]: With dead ends: 10577 [2021-12-18 04:21:30,007 INFO L226 Difference]: Without dead ends: 6318 [2021-12-18 04:21:30,021 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2021-12-18 04:21:30,022 INFO L933 BasicCegarLoop]: 1216 mSDtfsCounter, 826 mSDsluCounter, 3158 mSDsCounter, 0 mSdLazyCounter, 1210 mSolverCounterSat, 417 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 890 SdHoareTripleChecker+Valid, 4374 SdHoareTripleChecker+Invalid, 1631 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 417 IncrementalHoareTripleChecker+Valid, 1210 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.4s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:30,022 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [890 Valid, 4374 Invalid, 1631 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [417 Valid, 1210 Invalid, 4 Unknown, 0 Unchecked, 10.4s Time] [2021-12-18 04:21:30,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6318 states. [2021-12-18 04:21:30,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6318 to 5704. [2021-12-18 04:21:30,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5704 states, 4250 states have (on average 1.3538823529411765) internal successors, (5754), 4336 states have internal predecessors, (5754), 1066 states have call successors, (1066), 358 states have call predecessors, (1066), 387 states have return successors, (1183), 1041 states have call predecessors, (1183), 1065 states have call successors, (1183) [2021-12-18 04:21:30,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5704 states to 5704 states and 8003 transitions. [2021-12-18 04:21:30,161 INFO L78 Accepts]: Start accepts. Automaton has 5704 states and 8003 transitions. Word has length 130 [2021-12-18 04:21:30,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:30,162 INFO L470 AbstractCegarLoop]: Abstraction has 5704 states and 8003 transitions. [2021-12-18 04:21:30,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:21:30,164 INFO L276 IsEmpty]: Start isEmpty. Operand 5704 states and 8003 transitions. [2021-12-18 04:21:30,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2021-12-18 04:21:30,172 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:30,172 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:30,172 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-18 04:21:30,173 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:30,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:30,173 INFO L85 PathProgramCache]: Analyzing trace with hash -1355234686, now seen corresponding path program 1 times [2021-12-18 04:21:30,173 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:30,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [832367155] [2021-12-18 04:21:30,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:30,174 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:30,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:30,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:30,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:30,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:21:30,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-18 04:21:30,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-18 04:21:30,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-18 04:21:30,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-18 04:21:30,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:21:30,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:30,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-18 04:21:30,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:30,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:30,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:30,553 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2021-12-18 04:21:30,553 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:30,553 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [832367155] [2021-12-18 04:21:30,553 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [832367155] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:30,553 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:30,553 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-18 04:21:30,553 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103054313] [2021-12-18 04:21:30,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:30,555 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-18 04:21:30,555 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:30,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-18 04:21:30,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2021-12-18 04:21:30,556 INFO L87 Difference]: Start difference. First operand 5704 states and 8003 transitions. Second operand has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2021-12-18 04:21:32,685 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:34,714 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:36,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:36,536 INFO L93 Difference]: Finished difference Result 12348 states and 17757 transitions. [2021-12-18 04:21:36,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-18 04:21:36,536 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) Word has length 138 [2021-12-18 04:21:36,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:36,567 INFO L225 Difference]: With dead ends: 12348 [2021-12-18 04:21:36,567 INFO L226 Difference]: Without dead ends: 6671 [2021-12-18 04:21:36,582 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-18 04:21:36,582 INFO L933 BasicCegarLoop]: 898 mSDtfsCounter, 322 mSDsluCounter, 3509 mSDsCounter, 0 mSdLazyCounter, 1061 mSolverCounterSat, 348 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 4407 SdHoareTripleChecker+Invalid, 1411 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 348 IncrementalHoareTripleChecker+Valid, 1061 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.8s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:36,583 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [345 Valid, 4407 Invalid, 1411 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [348 Valid, 1061 Invalid, 2 Unknown, 0 Unchecked, 5.8s Time] [2021-12-18 04:21:36,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6671 states. [2021-12-18 04:21:36,767 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6671 to 5952. [2021-12-18 04:21:36,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5952 states, 4396 states have (on average 1.3475887170154686) internal successors, (5924), 4500 states have internal predecessors, (5924), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 413 states have return successors, (1329), 1125 states have call predecessors, (1329), 1141 states have call successors, (1329) [2021-12-18 04:21:36,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5952 states to 5952 states and 8395 transitions. [2021-12-18 04:21:36,800 INFO L78 Accepts]: Start accepts. Automaton has 5952 states and 8395 transitions. Word has length 138 [2021-12-18 04:21:36,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:36,801 INFO L470 AbstractCegarLoop]: Abstraction has 5952 states and 8395 transitions. [2021-12-18 04:21:36,801 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.444444444444445) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (14), 6 states have call predecessors, (14), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2021-12-18 04:21:36,802 INFO L276 IsEmpty]: Start isEmpty. Operand 5952 states and 8395 transitions. [2021-12-18 04:21:36,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 146 [2021-12-18 04:21:36,810 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:36,810 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:36,810 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-18 04:21:36,810 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:36,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:36,812 INFO L85 PathProgramCache]: Analyzing trace with hash 324022734, now seen corresponding path program 1 times [2021-12-18 04:21:36,812 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:36,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1766548570] [2021-12-18 04:21:36,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:36,812 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:36,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:36,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:36,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:36,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:36,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:36,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:36,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:21:37,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-18 04:21:37,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-18 04:21:37,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-18 04:21:37,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-18 04:21:37,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:21:37,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:37,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-18 04:21:37,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:37,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:37,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:21:37,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:37,158 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-12-18 04:21:37,159 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:37,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1766548570] [2021-12-18 04:21:37,159 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1766548570] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:37,159 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:37,159 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-12-18 04:21:37,159 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [320149602] [2021-12-18 04:21:37,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:37,160 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-18 04:21:37,160 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:37,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-18 04:21:37,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2021-12-18 04:21:37,161 INFO L87 Difference]: Start difference. First operand 5952 states and 8395 transitions. Second operand has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:21:39,266 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:41,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:41,367 INFO L93 Difference]: Finished difference Result 12600 states and 17885 transitions. [2021-12-18 04:21:41,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-18 04:21:41,369 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 145 [2021-12-18 04:21:41,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:41,391 INFO L225 Difference]: With dead ends: 12600 [2021-12-18 04:21:41,392 INFO L226 Difference]: Without dead ends: 6675 [2021-12-18 04:21:41,404 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2021-12-18 04:21:41,405 INFO L933 BasicCegarLoop]: 897 mSDtfsCounter, 429 mSDsluCounter, 5111 mSDsCounter, 0 mSdLazyCounter, 1331 mSolverCounterSat, 503 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 452 SdHoareTripleChecker+Valid, 6008 SdHoareTripleChecker+Invalid, 1835 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 503 IncrementalHoareTripleChecker+Valid, 1331 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:41,405 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [452 Valid, 6008 Invalid, 1835 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [503 Valid, 1331 Invalid, 1 Unknown, 0 Unchecked, 4.0s Time] [2021-12-18 04:21:41,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6675 states. [2021-12-18 04:21:41,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6675 to 6000. [2021-12-18 04:21:41,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6000 states, 4432 states have (on average 1.3447653429602888) internal successors, (5960), 4532 states have internal predecessors, (5960), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 425 states have return successors, (1375), 1141 states have call predecessors, (1375), 1141 states have call successors, (1375) [2021-12-18 04:21:41,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6000 states to 6000 states and 8477 transitions. [2021-12-18 04:21:41,547 INFO L78 Accepts]: Start accepts. Automaton has 6000 states and 8477 transitions. Word has length 145 [2021-12-18 04:21:41,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:41,549 INFO L470 AbstractCegarLoop]: Abstraction has 6000 states and 8477 transitions. [2021-12-18 04:21:41,549 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.909090909090908) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:21:41,549 INFO L276 IsEmpty]: Start isEmpty. Operand 6000 states and 8477 transitions. [2021-12-18 04:21:41,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-12-18 04:21:41,559 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:41,559 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:41,559 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-18 04:21:41,559 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:41,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:41,560 INFO L85 PathProgramCache]: Analyzing trace with hash -1003509590, now seen corresponding path program 1 times [2021-12-18 04:21:41,560 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:41,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1862110698] [2021-12-18 04:21:41,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:41,561 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:41,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:41,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:41,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:41,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:21:41,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-18 04:21:41,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-18 04:21:41,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-18 04:21:41,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-18 04:21:41,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-12-18 04:21:41,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:41,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:41,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-18 04:21:41,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:41,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:41,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:21:41,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:41,984 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-12-18 04:21:41,985 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:41,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1862110698] [2021-12-18 04:21:41,985 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1862110698] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:41,985 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:21:41,985 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-18 04:21:41,985 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [654656005] [2021-12-18 04:21:41,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:41,986 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-18 04:21:41,986 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:41,986 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-18 04:21:41,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-18 04:21:41,987 INFO L87 Difference]: Start difference. First operand 6000 states and 8477 transitions. Second operand has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-18 04:21:44,172 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:46,210 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:48,229 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:50,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:50,124 INFO L93 Difference]: Finished difference Result 12649 states and 17960 transitions. [2021-12-18 04:21:50,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 04:21:50,125 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 151 [2021-12-18 04:21:50,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:50,150 INFO L225 Difference]: With dead ends: 12649 [2021-12-18 04:21:50,150 INFO L226 Difference]: Without dead ends: 6657 [2021-12-18 04:21:50,160 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-12-18 04:21:50,162 INFO L933 BasicCegarLoop]: 899 mSDtfsCounter, 434 mSDsluCounter, 3091 mSDsCounter, 0 mSdLazyCounter, 1111 mSolverCounterSat, 508 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 3990 SdHoareTripleChecker+Invalid, 1622 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 508 IncrementalHoareTripleChecker+Valid, 1111 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.9s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:50,162 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [457 Valid, 3990 Invalid, 1622 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [508 Valid, 1111 Invalid, 3 Unknown, 0 Unchecked, 7.9s Time] [2021-12-18 04:21:50,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6657 states. [2021-12-18 04:21:50,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6657 to 6009. [2021-12-18 04:21:50,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6009 states, 4441 states have (on average 1.3440666516550326) internal successors, (5969), 4541 states have internal predecessors, (5969), 1142 states have call successors, (1142), 358 states have call predecessors, (1142), 425 states have return successors, (1375), 1141 states have call predecessors, (1375), 1141 states have call successors, (1375) [2021-12-18 04:21:50,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6009 states to 6009 states and 8486 transitions. [2021-12-18 04:21:50,340 INFO L78 Accepts]: Start accepts. Automaton has 6009 states and 8486 transitions. Word has length 151 [2021-12-18 04:21:50,340 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:50,340 INFO L470 AbstractCegarLoop]: Abstraction has 6009 states and 8486 transitions. [2021-12-18 04:21:50,340 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.875) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-18 04:21:50,340 INFO L276 IsEmpty]: Start isEmpty. Operand 6009 states and 8486 transitions. [2021-12-18 04:21:50,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2021-12-18 04:21:50,349 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:50,349 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:50,349 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-18 04:21:50,349 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:50,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:50,350 INFO L85 PathProgramCache]: Analyzing trace with hash -671508138, now seen corresponding path program 1 times [2021-12-18 04:21:50,350 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:50,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908580649] [2021-12-18 04:21:50,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:50,350 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:50,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:50,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:50,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:50,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:21:50,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-18 04:21:50,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-18 04:21:50,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-18 04:21:50,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-18 04:21:50,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-18 04:21:50,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:50,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:50,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-18 04:21:50,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:50,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:50,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:21:50,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:50,776 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-12-18 04:21:50,777 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:50,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908580649] [2021-12-18 04:21:50,777 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908580649] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-18 04:21:50,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1273643285] [2021-12-18 04:21:50,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:50,778 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 04:21:50,778 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 04:21:50,792 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-18 04:21:50,795 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-18 04:21:51,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:51,461 INFO L263 TraceCheckSpWp]: Trace formula consists of 2452 conjuncts, 15 conjunts are in the unsatisfiable core [2021-12-18 04:21:51,474 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:21:51,709 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2021-12-18 04:21:51,710 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:21:51,710 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1273643285] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:21:51,710 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-18 04:21:51,710 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2021-12-18 04:21:51,710 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2113927160] [2021-12-18 04:21:51,710 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:21:51,711 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:21:51,711 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:51,712 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:21:51,712 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2021-12-18 04:21:51,712 INFO L87 Difference]: Start difference. First operand 6009 states and 8486 transitions. Second operand has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-18 04:21:51,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:21:51,934 INFO L93 Difference]: Finished difference Result 9166 states and 12912 transitions. [2021-12-18 04:21:51,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:21:51,935 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 152 [2021-12-18 04:21:51,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:21:51,990 INFO L225 Difference]: With dead ends: 9166 [2021-12-18 04:21:51,991 INFO L226 Difference]: Without dead ends: 3175 [2021-12-18 04:21:52,002 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 175 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=147, Unknown=0, NotChecked=0, Total=182 [2021-12-18 04:21:52,003 INFO L933 BasicCegarLoop]: 942 mSDtfsCounter, 24 mSDsluCounter, 2816 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 3758 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 04:21:52,003 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [24 Valid, 3758 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 04:21:52,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3175 states. [2021-12-18 04:21:52,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3175 to 3079. [2021-12-18 04:21:52,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3422553751645458) internal successors, (3059), 2329 states have internal predecessors, (3059), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2021-12-18 04:21:52,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4331 transitions. [2021-12-18 04:21:52,133 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4331 transitions. Word has length 152 [2021-12-18 04:21:52,133 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:21:52,134 INFO L470 AbstractCegarLoop]: Abstraction has 3079 states and 4331 transitions. [2021-12-18 04:21:52,134 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.6) internal successors, (103), 5 states have internal predecessors, (103), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2021-12-18 04:21:52,134 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4331 transitions. [2021-12-18 04:21:52,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2021-12-18 04:21:52,172 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:21:52,172 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:21:52,218 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-18 04:21:52,398 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 04:21:52,399 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:21:52,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:21:52,399 INFO L85 PathProgramCache]: Analyzing trace with hash -1205243631, now seen corresponding path program 1 times [2021-12-18 04:21:52,400 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:21:52,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [851938490] [2021-12-18 04:21:52,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:52,400 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:21:52,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:52,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:21:52,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:21:52,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:21:52,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-18 04:21:52,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-18 04:21:52,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-18 04:21:52,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-18 04:21:52,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-18 04:21:52,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-18 04:21:52,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:52,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:21:52,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-18 04:21:52,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:52,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:21:52,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:21:52,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:52,883 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2021-12-18 04:21:52,883 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:21:52,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [851938490] [2021-12-18 04:21:52,883 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [851938490] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-18 04:21:52,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1885830689] [2021-12-18 04:21:52,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:21:52,884 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 04:21:52,884 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 04:21:52,885 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-18 04:21:52,886 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-18 04:21:54,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:21:54,394 INFO L263 TraceCheckSpWp]: Trace formula consists of 2527 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-18 04:21:54,399 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:21:54,666 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 1 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2021-12-18 04:21:54,667 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 04:21:54,954 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2021-12-18 04:21:54,954 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1885830689] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 04:21:54,954 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-18 04:21:54,954 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2021-12-18 04:21:54,955 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [666968230] [2021-12-18 04:21:54,955 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-18 04:21:54,955 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-18 04:21:54,955 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:21:54,955 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-18 04:21:54,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=139, Unknown=0, NotChecked=0, Total=182 [2021-12-18 04:21:54,956 INFO L87 Difference]: Start difference. First operand 3079 states and 4331 transitions. Second operand has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-18 04:21:57,243 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:21:59,273 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:01,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:01,213 INFO L93 Difference]: Finished difference Result 6479 states and 9163 transitions. [2021-12-18 04:22:01,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-18 04:22:01,214 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 158 [2021-12-18 04:22:01,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:01,223 INFO L225 Difference]: With dead ends: 6479 [2021-12-18 04:22:01,223 INFO L226 Difference]: Without dead ends: 3415 [2021-12-18 04:22:01,229 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 359 GetRequests, 337 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=135, Invalid=371, Unknown=0, NotChecked=0, Total=506 [2021-12-18 04:22:01,230 INFO L933 BasicCegarLoop]: 924 mSDtfsCounter, 442 mSDsluCounter, 5255 mSDsCounter, 0 mSdLazyCounter, 1369 mSolverCounterSat, 495 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 465 SdHoareTripleChecker+Valid, 6179 SdHoareTripleChecker+Invalid, 1866 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 495 IncrementalHoareTripleChecker+Valid, 1369 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:01,230 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [465 Valid, 6179 Invalid, 1866 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [495 Valid, 1369 Invalid, 2 Unknown, 0 Unchecked, 5.9s Time] [2021-12-18 04:22:01,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3415 states. [2021-12-18 04:22:01,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3415 to 3086. [2021-12-18 04:22:01,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3086 states, 2286 states have (on average 1.3412073490813647) internal successors, (3066), 2336 states have internal predecessors, (3066), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2021-12-18 04:22:01,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3086 states to 3086 states and 4338 transitions. [2021-12-18 04:22:01,291 INFO L78 Accepts]: Start accepts. Automaton has 3086 states and 4338 transitions. Word has length 158 [2021-12-18 04:22:01,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:01,291 INFO L470 AbstractCegarLoop]: Abstraction has 3086 states and 4338 transitions. [2021-12-18 04:22:01,291 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-18 04:22:01,291 INFO L276 IsEmpty]: Start isEmpty. Operand 3086 states and 4338 transitions. [2021-12-18 04:22:01,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-12-18 04:22:01,296 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:01,296 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:01,329 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-18 04:22:01,519 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2021-12-18 04:22:01,520 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:01,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:01,520 INFO L85 PathProgramCache]: Analyzing trace with hash -2144584603, now seen corresponding path program 2 times [2021-12-18 04:22:01,520 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:22:01,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1281141521] [2021-12-18 04:22:01,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:01,520 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:22:01,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:22:01,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:22:01,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:22:01,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:22:01,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-18 04:22:01,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:22:01,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-18 04:22:01,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 04:22:01,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-18 04:22:01,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-18 04:22:01,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:01,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:22:01,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:01,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-18 04:22:01,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:02,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:02,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:02,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:02,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:02,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:22:02,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:02,336 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 88 trivial. 0 not checked. [2021-12-18 04:22:02,337 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:22:02,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1281141521] [2021-12-18 04:22:02,337 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1281141521] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:22:02,337 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:22:02,337 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2021-12-18 04:22:02,337 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1638984002] [2021-12-18 04:22:02,337 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:22:02,338 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-12-18 04:22:02,338 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:22:02,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-12-18 04:22:02,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2021-12-18 04:22:02,339 INFO L87 Difference]: Start difference. First operand 3086 states and 4338 transitions. Second operand has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 04:22:04,579 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:06,609 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:09,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:09,531 INFO L93 Difference]: Finished difference Result 6457 states and 9221 transitions. [2021-12-18 04:22:09,532 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-12-18 04:22:09,532 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2021-12-18 04:22:09,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:09,541 INFO L225 Difference]: With dead ends: 6457 [2021-12-18 04:22:09,541 INFO L226 Difference]: Without dead ends: 3417 [2021-12-18 04:22:09,548 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2021-12-18 04:22:09,549 INFO L933 BasicCegarLoop]: 929 mSDtfsCounter, 442 mSDsluCounter, 11217 mSDsCounter, 0 mSdLazyCounter, 2510 mSolverCounterSat, 482 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 465 SdHoareTripleChecker+Valid, 12146 SdHoareTripleChecker+Invalid, 2994 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 482 IncrementalHoareTripleChecker+Valid, 2510 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.0s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:09,550 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [465 Valid, 12146 Invalid, 2994 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [482 Valid, 2510 Invalid, 2 Unknown, 0 Unchecked, 7.0s Time] [2021-12-18 04:22:09,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2021-12-18 04:22:09,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3098. [2021-12-18 04:22:09,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3098 states, 2297 states have (on average 1.3369612538093165) internal successors, (3071), 2342 states have internal predecessors, (3071), 578 states have call successors, (578), 188 states have call predecessors, (578), 222 states have return successors, (698), 583 states have call predecessors, (698), 577 states have call successors, (698) [2021-12-18 04:22:09,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3098 states to 3098 states and 4347 transitions. [2021-12-18 04:22:09,617 INFO L78 Accepts]: Start accepts. Automaton has 3098 states and 4347 transitions. Word has length 161 [2021-12-18 04:22:09,617 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:09,617 INFO L470 AbstractCegarLoop]: Abstraction has 3098 states and 4347 transitions. [2021-12-18 04:22:09,617 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 04:22:09,618 INFO L276 IsEmpty]: Start isEmpty. Operand 3098 states and 4347 transitions. [2021-12-18 04:22:09,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2021-12-18 04:22:09,623 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:09,623 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:09,624 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-18 04:22:09,624 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:09,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:09,624 INFO L85 PathProgramCache]: Analyzing trace with hash -1162446187, now seen corresponding path program 1 times [2021-12-18 04:22:09,625 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:22:09,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [220742291] [2021-12-18 04:22:09,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:09,625 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:22:09,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:22:09,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:22:09,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:22:09,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:22:09,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-18 04:22:09,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:22:09,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-18 04:22:09,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 04:22:09,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-18 04:22:09,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-18 04:22:09,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:09,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 04:22:09,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:09,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 04:22:09,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:09,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-18 04:22:09,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:10,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:22:10,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:10,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:10,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:10,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:10,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:10,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:22:10,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:10,353 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-18 04:22:10,353 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:22:10,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [220742291] [2021-12-18 04:22:10,354 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [220742291] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:22:10,354 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:22:10,354 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2021-12-18 04:22:10,354 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2124049179] [2021-12-18 04:22:10,354 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:22:10,354 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-12-18 04:22:10,354 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:22:10,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-12-18 04:22:10,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2021-12-18 04:22:10,355 INFO L87 Difference]: Start difference. First operand 3098 states and 4347 transitions. Second operand has 19 states, 18 states have (on average 6.055555555555555) internal successors, (109), 11 states have internal predecessors, (109), 3 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:22:12,646 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:14,678 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:16,709 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:20,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:20,594 INFO L93 Difference]: Finished difference Result 6469 states and 9216 transitions. [2021-12-18 04:22:20,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-12-18 04:22:20,595 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 6.055555555555555) internal successors, (109), 11 states have internal predecessors, (109), 3 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) Word has length 170 [2021-12-18 04:22:20,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:20,631 INFO L225 Difference]: With dead ends: 6469 [2021-12-18 04:22:20,631 INFO L226 Difference]: Without dead ends: 3417 [2021-12-18 04:22:20,638 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 38 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2021-12-18 04:22:20,638 INFO L933 BasicCegarLoop]: 923 mSDtfsCounter, 222 mSDsluCounter, 12859 mSDsCounter, 0 mSdLazyCounter, 3261 mSolverCounterSat, 181 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 245 SdHoareTripleChecker+Valid, 13782 SdHoareTripleChecker+Invalid, 3445 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 181 IncrementalHoareTripleChecker+Valid, 3261 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.0s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:20,638 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [245 Valid, 13782 Invalid, 3445 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [181 Valid, 3261 Invalid, 3 Unknown, 0 Unchecked, 10.0s Time] [2021-12-18 04:22:20,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2021-12-18 04:22:20,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3109. [2021-12-18 04:22:20,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3109 states, 2306 states have (on average 1.3343451864700782) internal successors, (3077), 2349 states have internal predecessors, (3077), 578 states have call successors, (578), 188 states have call predecessors, (578), 224 states have return successors, (701), 587 states have call predecessors, (701), 577 states have call successors, (701) [2021-12-18 04:22:20,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3109 states to 3109 states and 4356 transitions. [2021-12-18 04:22:20,733 INFO L78 Accepts]: Start accepts. Automaton has 3109 states and 4356 transitions. Word has length 170 [2021-12-18 04:22:20,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:20,734 INFO L470 AbstractCegarLoop]: Abstraction has 3109 states and 4356 transitions. [2021-12-18 04:22:20,734 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 6.055555555555555) internal successors, (109), 11 states have internal predecessors, (109), 3 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:22:20,734 INFO L276 IsEmpty]: Start isEmpty. Operand 3109 states and 4356 transitions. [2021-12-18 04:22:20,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-12-18 04:22:20,739 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:20,739 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:20,739 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-18 04:22:20,739 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:20,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:20,740 INFO L85 PathProgramCache]: Analyzing trace with hash -1475945336, now seen corresponding path program 1 times [2021-12-18 04:22:20,740 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:22:20,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1218151616] [2021-12-18 04:22:20,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:20,740 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:22:20,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 04:22:20,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-18 04:22:20,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-18 04:22:20,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-18 04:22:20,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-18 04:22:20,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-18 04:22:20,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-18 04:22:20,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:20,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 04:22:20,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-18 04:22:21,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-12-18 04:22:21,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:21,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-18 04:22:21,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-18 04:22:21,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-18 04:22:21,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-18 04:22:21,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:21,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 04:22:21,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-18 04:22:21,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:21,084 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-12-18 04:22:21,085 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 04:22:21,085 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1218151616] [2021-12-18 04:22:21,085 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1218151616] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:22:21,085 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:22:21,085 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:22:21,085 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1170185999] [2021-12-18 04:22:21,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:22:21,086 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:22:21,086 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 04:22:21,086 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:22:21,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:22:21,086 INFO L87 Difference]: Start difference. First operand 3109 states and 4356 transitions. Second operand has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-18 04:22:23,193 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-18 04:22:25,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:25,353 INFO L93 Difference]: Finished difference Result 7313 states and 10263 transitions. [2021-12-18 04:22:25,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 04:22:25,353 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 172 [2021-12-18 04:22:25,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:25,380 INFO L225 Difference]: With dead ends: 7313 [2021-12-18 04:22:25,399 INFO L226 Difference]: Without dead ends: 4250 [2021-12-18 04:22:25,405 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-18 04:22:25,406 INFO L933 BasicCegarLoop]: 1068 mSDtfsCounter, 819 mSDsluCounter, 2213 mSDsCounter, 0 mSdLazyCounter, 1252 mSolverCounterSat, 268 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 905 SdHoareTripleChecker+Valid, 3281 SdHoareTripleChecker+Invalid, 1521 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 268 IncrementalHoareTripleChecker+Valid, 1252 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.1s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:25,407 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [905 Valid, 3281 Invalid, 1521 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [268 Valid, 1252 Invalid, 1 Unknown, 0 Unchecked, 4.1s Time] [2021-12-18 04:22:25,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4250 states. [2021-12-18 04:22:25,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4250 to 3968. [2021-12-18 04:22:25,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3968 states, 2966 states have (on average 1.3354686446392448) internal successors, (3961), 3018 states have internal predecessors, (3961), 704 states have call successors, (704), 248 states have call predecessors, (704), 297 states have return successors, (864), 719 states have call predecessors, (864), 703 states have call successors, (864) [2021-12-18 04:22:25,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3968 states to 3968 states and 5529 transitions. [2021-12-18 04:22:25,542 INFO L78 Accepts]: Start accepts. Automaton has 3968 states and 5529 transitions. Word has length 172 [2021-12-18 04:22:25,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:25,543 INFO L470 AbstractCegarLoop]: Abstraction has 3968 states and 5529 transitions. [2021-12-18 04:22:25,543 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-18 04:22:25,543 INFO L276 IsEmpty]: Start isEmpty. Operand 3968 states and 5529 transitions. [2021-12-18 04:22:25,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2021-12-18 04:22:25,549 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:25,549 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:25,549 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-12-18 04:22:25,549 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:25,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:25,550 INFO L85 PathProgramCache]: Analyzing trace with hash -1723005698, now seen corresponding path program 1 times [2021-12-18 04:22:25,550 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 04:22:25,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1322625917] [2021-12-18 04:22:25,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:25,550 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 04:22:26,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 04:22:26,091 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-18 04:22:35,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 04:22:35,508 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-18 04:22:35,508 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-18 04:22:35,509 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-18 04:22:35,510 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-18 04:22:35,512 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:35,514 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-18 04:22:35,547 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-18 04:22:35,560 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,561 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,561 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,561 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:22:35,705 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.12 04:22:35 BoogieIcfgContainer [2021-12-18 04:22:35,705 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-18 04:22:35,706 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-18 04:22:35,706 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-18 04:22:35,706 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-18 04:22:35,707 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:20:50" (3/4) ... [2021-12-18 04:22:35,708 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-18 04:22:35,709 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-18 04:22:35,709 INFO L158 Benchmark]: Toolchain (without parser) took 111035.48ms. Allocated memory was 71.3MB in the beginning and 1.2GB in the end (delta: 1.1GB). Free memory was 36.6MB in the beginning and 761.2MB in the end (delta: -724.5MB). Peak memory consumption was 388.0MB. Max. memory is 16.1GB. [2021-12-18 04:22:35,710 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 71.3MB. Free memory is still 51.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 04:22:35,710 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1278.21ms. Allocated memory was 71.3MB in the beginning and 121.6MB in the end (delta: 50.3MB). Free memory was 36.4MB in the beginning and 53.1MB in the end (delta: -16.8MB). Peak memory consumption was 50.1MB. Max. memory is 16.1GB. [2021-12-18 04:22:35,711 INFO L158 Benchmark]: Boogie Procedure Inliner took 172.63ms. Allocated memory was 121.6MB in the beginning and 165.7MB in the end (delta: 44.0MB). Free memory was 53.1MB in the beginning and 103.2MB in the end (delta: -50.1MB). Peak memory consumption was 17.5MB. Max. memory is 16.1GB. [2021-12-18 04:22:35,711 INFO L158 Benchmark]: Boogie Preprocessor took 158.76ms. Allocated memory is still 165.7MB. Free memory was 103.2MB in the beginning and 89.8MB in the end (delta: 13.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-18 04:22:35,711 INFO L158 Benchmark]: RCFGBuilder took 3721.42ms. Allocated memory was 165.7MB in the beginning and 247.5MB in the end (delta: 81.8MB). Free memory was 89.8MB in the beginning and 133.3MB in the end (delta: -43.5MB). Peak memory consumption was 93.4MB. Max. memory is 16.1GB. [2021-12-18 04:22:35,711 INFO L158 Benchmark]: TraceAbstraction took 105696.77ms. Allocated memory was 247.5MB in the beginning and 1.2GB in the end (delta: 935.3MB). Free memory was 132.3MB in the beginning and 761.2MB in the end (delta: -628.9MB). Peak memory consumption was 758.4MB. Max. memory is 16.1GB. [2021-12-18 04:22:35,711 INFO L158 Benchmark]: Witness Printer took 2.63ms. Allocated memory is still 1.2GB. Free memory is still 761.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 04:22:35,713 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 71.3MB. Free memory is still 51.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1278.21ms. Allocated memory was 71.3MB in the beginning and 121.6MB in the end (delta: 50.3MB). Free memory was 36.4MB in the beginning and 53.1MB in the end (delta: -16.8MB). Peak memory consumption was 50.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 172.63ms. Allocated memory was 121.6MB in the beginning and 165.7MB in the end (delta: 44.0MB). Free memory was 53.1MB in the beginning and 103.2MB in the end (delta: -50.1MB). Peak memory consumption was 17.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 158.76ms. Allocated memory is still 165.7MB. Free memory was 103.2MB in the beginning and 89.8MB in the end (delta: 13.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * RCFGBuilder took 3721.42ms. Allocated memory was 165.7MB in the beginning and 247.5MB in the end (delta: 81.8MB). Free memory was 89.8MB in the beginning and 133.3MB in the end (delta: -43.5MB). Peak memory consumption was 93.4MB. Max. memory is 16.1GB. * TraceAbstraction took 105696.77ms. Allocated memory was 247.5MB in the beginning and 1.2GB in the end (delta: 935.3MB). Free memory was 132.3MB in the beginning and 761.2MB in the end (delta: -628.9MB). Peak memory consumption was 758.4MB. Max. memory is 16.1GB. * Witness Printer took 2.63ms. Allocated memory is still 1.2GB. Free memory is still 761.2MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7323]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8887, overapproximation of bitwiseAnd at line 8897. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=11, ldvarg3={286:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=4, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=11, ldvarg3={286:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg3={286:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg3={286:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={167:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={286:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={169:0}, descriptor.flags=0, descriptor___0={168:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=-2, \result=-2, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, c=0, exp=-2, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={169:0}, descriptor.flags=0, descriptor___0={168:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=-2, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND TRUE tmp != 0L [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, sem={163:0}, sem={163:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=1560, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, ldv_func_arg1={165:0}, ldv_func_arg1={165:0}, ldv_func_arg2={4294967354:4294967322}, ldv_func_arg2={4294967354:4294967322}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, descriptor={169:0}, descriptor___0={168:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=-2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=-3, \result=-3, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, c=0, exp=-3, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, descriptor={169:0}, descriptor___0={168:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=-3, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=-2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND TRUE tmp___0 != 0L [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=-2, tmp___0=-3, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=6864, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=232, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9022] COND TRUE ldv_state_variable_1 == 1 [L9023] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8796] int ret ; [L8797] struct usb_card_rec *card ; [L8799] EXPR adapter->card [L8799] card = (struct usb_card_rec *)adapter->card [L8800] EXPR card->usb_boot_state VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->usb_boot_state=175, fw={0:0}, fw={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8800] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8812] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8393] struct usb_card_rec *card ; [L8394] int i ; [L8395] int tmp ; [L8396] int tmp___0 ; [L8398] EXPR adapter->card [L8398] card = (struct usb_card_rec *)adapter->card [L8399] card->rx_cmd.adapter = adapter [L8400] EXPR card->rx_cmd_ep [L8400] card->rx_cmd.ep = card->rx_cmd_ep [L8401] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7271] void *p ; [L7272] void *tmp ; [L7273] int tmp___0 ; [L7275] tmp___0 = __VERIFIER_nondet_int() [L7276] COND FALSE !(tmp___0 != 0) [L7279] tmp = malloc(size) [L7280] p = tmp VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-36893488147419103231:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-36893488147419103231:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-36893488147419103231:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-36893488147419103231:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7282] return (p); VAL [\old(size)=184, \result={-36893488147419103231:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-36893488147419103231:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-36893488147419103231:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, arg0=0, arg1=208, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-36893488147419103231:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] return ldv_malloc(sizeof(struct urb)); [L8401] RET, EXPR usb_alloc_urb(0, 208U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_alloc_urb(0, 208U)={-36893488147419103231:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8401] card->rx_cmd.urb = usb_alloc_urb(0, 208U) [L8402] EXPR card->rx_cmd.urb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.urb={-36893488147419103231:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8402] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8407] CALL, EXPR ldv_dev_alloc_skb_14(2048U) VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND FALSE !(tmp___0 != 0) [L7296] EXPR, FCALL calloc(1UL, size) [L7296] tmp = calloc(1UL, size) [L7297] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7299] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551615:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND FALSE !(! skb) [L9387] CALL ldv_set_add(LDV_SKBS, skb) [L9255] int i ; [L9257] i = 0 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9258] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9259] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9269] COND TRUE last_index < 15 [L9270] set_impl[last_index] = e [L9271] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9387] RET ldv_set_add(LDV_SKBS, skb) [L9388] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={-18446744073709551615:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=0, \old(length)=2048, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] RET, EXPR ldv_dev_alloc_skb_14(2048U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, ldv_dev_alloc_skb_14(2048U)={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] card->rx_cmd.skb = ldv_dev_alloc_skb_14(2048U) [L8408] EXPR card->rx_cmd.skb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.skb={-18446744073709551615:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8408] COND FALSE !((unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0)) [L8413] CALL, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7841] struct mwifiex_adapter *adapter ; [L7842] struct usb_card_rec *card ; [L7843] unsigned int tmp ; [L7844] int tmp___0 ; [L7846] EXPR ctx->adapter [L7846] adapter = ctx->adapter [L7847] EXPR adapter->card [L7847] card = (struct usb_card_rec *)adapter->card [L7848] EXPR card->rx_cmd_ep [L7848] EXPR ctx->ep VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={4294967355:-29}, card->rx_cmd_ep=178, ctx={167:0}, ctx={167:0}, ctx->ep=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7848] COND TRUE (int )card->rx_cmd_ep != (int )ctx->ep [L7849] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp___0=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND TRUE ! skb [L9385] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=1, \old(length)=2048, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={4294967355:-29}, ctx={167:0}, ctx={167:0}, last_index=1, ldv_dev_alloc_skb_14((unsigned int )size)={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] ctx->skb = ldv_dev_alloc_skb_14((unsigned int )size) [L7850] EXPR ctx->skb VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={4294967355:-29}, ctx={167:0}, ctx={167:0}, ctx->skb={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7850] COND TRUE (unsigned long )ctx->skb == (unsigned long )((struct sk_buff *)0) [L7851] adapter->dev [L7853] return (-12); VAL [\old(last_index)=1, \old(size)=2048, \result=-12, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={4294967355:-29}, ctx={167:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] RET, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048)=-12, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] tmp = mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) [L8414] COND TRUE tmp != 0 [L8415] return (-1); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=-12, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8812] RET, EXPR mwifiex_usb_rx_init(adapter) [L8812] ret = mwifiex_usb_rx_init(adapter) [L8813] COND FALSE !(ret == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8817] return (ret); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9023] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L9024] ldv_state_variable_1 = 1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9061] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L9062] CALL mwifiex_usb_cleanup_module() [L8908] int tmp ; [L8910] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9477] return __VERIFIER_nondet_int(); [L8910] RET, EXPR down_interruptible(& add_remove_card_sem) [L8910] tmp = down_interruptible(& add_remove_card_sem) [L8911] COND FALSE !(tmp == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8915] user_rmmod = 1U [L8916] CALL ldv_usb_deregister_18(& mwifiex_usb_driver) [L9235] FCALL usb_deregister(arg) [L9236] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, arg={165:0}, arg={165:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L8916] RET ldv_usb_deregister_18(& mwifiex_usb_driver) [L9062] RET mwifiex_usb_cleanup_module() [L9063] ldv_state_variable_0 = 2 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=11, ldvarg2={0:0}, ldvarg3={286:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=11, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9164] CALL ldv_check_final_state() [L9446] int tmp___7 ; [L9448] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L9337] return (last_index == 0); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9448] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L9448] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L9449] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp___7=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9451] CALL ldv_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L7323] reach_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967354:4294967322}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 679 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 105.5s, OverallIterations: 13, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 85.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 28 mSolverCounterUnknown, 8624 SdHoareTripleChecker+Valid, 82.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8019 mSDsluCounter, 69117 SdHoareTripleChecker+Invalid, 78.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 57249 mSDsCounter, 5439 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 16733 IncrementalHoareTripleChecker+Invalid, 22200 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5439 mSolverCounterUnsat, 11868 mSDtfsCounter, 16733 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 920 GetRequests, 772 SyntacticMatches, 1 SemanticMatches, 147 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 198 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=6009occurred in iteration=7, InterpolantAutomatonStates: 122, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 5162 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 3.0s SatisfiabilityAnalysisTime, 4.2s InterpolantComputationTime, 2094 NumberOfCodeBlocks, 2094 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 2051 ConstructedInterpolants, 0 QuantifiedInterpolants, 4304 SizeOfPredicates, 7 NumberOfNonLiveVariables, 4979 ConjunctsInSsa, 22 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 1238/1242 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-18 04:22:35,889 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-18 04:22:37,682 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-18 04:22:37,683 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-18 04:22:37,703 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-18 04:22:37,703 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-18 04:22:37,704 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-18 04:22:37,705 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-18 04:22:37,706 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-18 04:22:37,707 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-18 04:22:37,708 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-18 04:22:37,709 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-18 04:22:37,710 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-18 04:22:37,710 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-18 04:22:37,711 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-18 04:22:37,712 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-18 04:22:37,713 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-18 04:22:37,713 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-18 04:22:37,714 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-18 04:22:37,715 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-18 04:22:37,716 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-18 04:22:37,717 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-18 04:22:37,719 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-18 04:22:37,720 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-18 04:22:37,720 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-18 04:22:37,722 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-18 04:22:37,722 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-18 04:22:37,723 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-18 04:22:37,723 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-18 04:22:37,724 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-18 04:22:37,724 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-18 04:22:37,725 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-18 04:22:37,725 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-18 04:22:37,726 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-18 04:22:37,726 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-18 04:22:37,727 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-18 04:22:37,727 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-18 04:22:37,728 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-18 04:22:37,728 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-18 04:22:37,728 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-18 04:22:37,729 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-18 04:22:37,729 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-18 04:22:37,730 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-18 04:22:37,746 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-18 04:22:37,746 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-18 04:22:37,746 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-18 04:22:37,747 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-18 04:22:37,747 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-18 04:22:37,747 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-18 04:22:37,748 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-18 04:22:37,748 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-18 04:22:37,748 INFO L138 SettingsManager]: * Use SBE=true [2021-12-18 04:22:37,748 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-18 04:22:37,749 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-18 04:22:37,749 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-18 04:22:37,749 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-18 04:22:37,749 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-18 04:22:37,749 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-18 04:22:37,750 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-18 04:22:37,750 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-18 04:22:37,750 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-18 04:22:37,750 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-18 04:22:37,750 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-18 04:22:37,751 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-18 04:22:37,751 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-18 04:22:37,751 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-18 04:22:37,751 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:22:37,751 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-18 04:22:37,752 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-18 04:22:37,752 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-18 04:22:37,752 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-18 04:22:37,752 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-18 04:22:37,752 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-18 04:22:37,752 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-18 04:22:37,753 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-18 04:22:37,753 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-18 04:22:37,753 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-18 04:22:37,753 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2021-12-18 04:22:38,004 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-18 04:22:38,037 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-18 04:22:38,040 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-18 04:22:38,041 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-18 04:22:38,041 INFO L275 PluginConnector]: CDTParser initialized [2021-12-18 04:22:38,045 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-18 04:22:38,101 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fe60b7147/22dc1c459fc74330a9a05107e8d10cc7/FLAG4be01b2cb [2021-12-18 04:22:38,742 INFO L306 CDTParser]: Found 1 translation units. [2021-12-18 04:22:38,743 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-18 04:22:38,774 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fe60b7147/22dc1c459fc74330a9a05107e8d10cc7/FLAG4be01b2cb [2021-12-18 04:22:39,134 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fe60b7147/22dc1c459fc74330a9a05107e8d10cc7 [2021-12-18 04:22:39,139 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-18 04:22:39,140 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-18 04:22:39,142 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-18 04:22:39,142 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-18 04:22:39,144 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-18 04:22:39,145 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:22:39" (1/1) ... [2021-12-18 04:22:39,146 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@44b9eba2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:39, skipping insertion in model container [2021-12-18 04:22:39,146 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 04:22:39" (1/1) ... [2021-12-18 04:22:39,150 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-18 04:22:39,236 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 04:22:39,792 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-12-18 04:22:40,228 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:22:40,253 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-18 04:22:40,286 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 04:22:40,370 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-12-18 04:22:40,442 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:22:40,449 INFO L203 MainTranslator]: Completed pre-run [2021-12-18 04:22:40,546 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2021-12-18 04:22:40,608 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 04:22:40,721 INFO L208 MainTranslator]: Completed translation [2021-12-18 04:22:40,722 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40 WrapperNode [2021-12-18 04:22:40,722 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-18 04:22:40,723 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-18 04:22:40,723 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-18 04:22:40,723 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-18 04:22:40,727 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,768 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,849 INFO L137 Inliner]: procedures = 172, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2247 [2021-12-18 04:22:40,849 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-18 04:22:40,850 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-18 04:22:40,850 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-18 04:22:40,850 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-18 04:22:40,855 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,856 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,876 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,882 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,950 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,967 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,979 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:40,988 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-18 04:22:40,989 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-18 04:22:40,989 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-18 04:22:40,989 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-18 04:22:40,990 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (1/1) ... [2021-12-18 04:22:41,011 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 04:22:41,018 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 04:22:41,057 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-18 04:22:41,166 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-18 04:22:41,186 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2021-12-18 04:22:41,187 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2021-12-18 04:22:41,187 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:22:41,187 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-12-18 04:22:41,187 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-18 04:22:41,188 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2021-12-18 04:22:41,188 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2021-12-18 04:22:41,188 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2021-12-18 04:22:41,188 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2021-12-18 04:22:41,188 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2021-12-18 04:22:41,188 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2021-12-18 04:22:41,188 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-18 04:22:41,189 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-18 04:22:41,189 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-18 04:22:41,189 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-18 04:22:41,189 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-18 04:22:41,189 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2021-12-18 04:22:41,189 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2021-12-18 04:22:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-18 04:22:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-18 04:22:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-18 04:22:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-18 04:22:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2021-12-18 04:22:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2021-12-18 04:22:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2021-12-18 04:22:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2021-12-18 04:22:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-18 04:22:41,191 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-18 04:22:41,191 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-18 04:22:41,191 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-18 04:22:41,191 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-18 04:22:41,191 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-18 04:22:41,191 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-18 04:22:41,191 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-18 04:22:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-12-18 04:22:41,192 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-12-18 04:22:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2021-12-18 04:22:41,192 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2021-12-18 04:22:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-18 04:22:41,192 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-18 04:22:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-18 04:22:41,193 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-18 04:22:41,193 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2021-12-18 04:22:41,193 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2021-12-18 04:22:41,193 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-18 04:22:41,193 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-18 04:22:41,193 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-18 04:22:41,193 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2021-12-18 04:22:41,194 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2021-12-18 04:22:41,194 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-18 04:22:41,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-18 04:22:41,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-18 04:22:41,195 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-18 04:22:41,196 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-18 04:22:41,196 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2021-12-18 04:22:41,196 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2021-12-18 04:22:41,196 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-18 04:22:41,196 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-18 04:22:41,196 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-18 04:22:41,196 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-18 04:22:41,197 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-18 04:22:41,197 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-12-18 04:22:41,197 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-12-18 04:22:41,197 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-18 04:22:41,197 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2021-12-18 04:22:41,197 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2021-12-18 04:22:41,197 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-18 04:22:41,198 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-18 04:22:41,198 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-18 04:22:41,198 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-18 04:22:41,198 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-18 04:22:41,198 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2021-12-18 04:22:41,198 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2021-12-18 04:22:41,198 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-18 04:22:41,198 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2021-12-18 04:22:41,199 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2021-12-18 04:22:41,199 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2021-12-18 04:22:41,199 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2021-12-18 04:22:41,199 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-18 04:22:41,199 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-18 04:22:41,199 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-18 04:22:41,199 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-18 04:22:41,199 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-18 04:22:41,200 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-18 04:22:41,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-18 04:22:41,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-18 04:22:41,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-18 04:22:41,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-18 04:22:41,201 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-18 04:22:41,201 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-18 04:22:41,201 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-12-18 04:22:41,201 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-12-18 04:22:41,202 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2021-12-18 04:22:41,202 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2021-12-18 04:22:41,202 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-18 04:22:41,202 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2021-12-18 04:22:41,202 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2021-12-18 04:22:41,202 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2021-12-18 04:22:41,202 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2021-12-18 04:22:41,203 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-18 04:22:41,203 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-18 04:22:41,203 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-12-18 04:22:41,203 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-18 04:22:41,203 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-18 04:22:41,203 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-18 04:22:41,203 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-18 04:22:41,203 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2021-12-18 04:22:41,204 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2021-12-18 04:22:41,572 INFO L236 CfgBuilder]: Building ICFG [2021-12-18 04:22:41,573 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-18 04:22:41,673 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-18 04:22:55,173 INFO L277 CfgBuilder]: Performing block encoding [2021-12-18 04:22:55,192 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-18 04:22:55,193 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-18 04:22:55,196 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:22:55 BoogieIcfgContainer [2021-12-18 04:22:55,196 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-18 04:22:55,200 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-18 04:22:55,201 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-18 04:22:55,203 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-18 04:22:55,203 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.12 04:22:39" (1/3) ... [2021-12-18 04:22:55,204 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c5669c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:22:55, skipping insertion in model container [2021-12-18 04:22:55,208 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 04:22:40" (2/3) ... [2021-12-18 04:22:55,208 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c5669c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 04:22:55, skipping insertion in model container [2021-12-18 04:22:55,209 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:22:55" (3/3) ... [2021-12-18 04:22:55,210 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2021-12-18 04:22:55,214 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-18 04:22:55,215 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-18 04:22:55,248 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-18 04:22:55,253 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-18 04:22:55,253 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-18 04:22:55,273 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2021-12-18 04:22:55,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-12-18 04:22:55,279 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:55,280 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:55,280 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:55,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:55,284 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2021-12-18 04:22:55,294 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:22:55,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1645197964] [2021-12-18 04:22:55,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:55,295 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:22:55,295 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:22:55,297 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:22:55,300 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-18 04:22:55,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:55,782 INFO L263 TraceCheckSpWp]: Trace formula consists of 793 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-18 04:22:55,786 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:22:56,136 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-18 04:22:56,136 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:22:56,137 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:22:56,137 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1645197964] [2021-12-18 04:22:56,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1645197964] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:22:56,138 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:22:56,147 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-18 04:22:56,148 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1488110736] [2021-12-18 04:22:56,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:22:56,151 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-18 04:22:56,152 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:22:56,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-18 04:22:56,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-18 04:22:56,184 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:22:56,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:56,449 INFO L93 Difference]: Finished difference Result 1354 states and 1960 transitions. [2021-12-18 04:22:56,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-18 04:22:56,453 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2021-12-18 04:22:56,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:56,465 INFO L225 Difference]: With dead ends: 1354 [2021-12-18 04:22:56,469 INFO L226 Difference]: Without dead ends: 668 [2021-12-18 04:22:56,478 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:22:56,483 INFO L933 BasicCegarLoop]: 952 mSDtfsCounter, 2 mSDsluCounter, 1901 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 2853 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:56,485 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 2853 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 04:22:56,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2021-12-18 04:22:56,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 668. [2021-12-18 04:22:56,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 668 states, 498 states have (on average 1.359437751004016) internal successors, (677), 505 states have internal predecessors, (677), 133 states have call successors, (133), 37 states have call predecessors, (133), 36 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2021-12-18 04:22:56,562 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 668 states to 668 states and 942 transitions. [2021-12-18 04:22:56,563 INFO L78 Accepts]: Start accepts. Automaton has 668 states and 942 transitions. Word has length 45 [2021-12-18 04:22:56,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:56,564 INFO L470 AbstractCegarLoop]: Abstraction has 668 states and 942 transitions. [2021-12-18 04:22:56,565 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:22:56,565 INFO L276 IsEmpty]: Start isEmpty. Operand 668 states and 942 transitions. [2021-12-18 04:22:56,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-18 04:22:56,567 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:56,567 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:56,585 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2021-12-18 04:22:56,782 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:22:56,783 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:56,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:56,784 INFO L85 PathProgramCache]: Analyzing trace with hash 1712559836, now seen corresponding path program 1 times [2021-12-18 04:22:56,786 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:22:56,786 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1150977886] [2021-12-18 04:22:56,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:22:56,787 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:22:56,787 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:22:56,788 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:22:56,812 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-18 04:22:57,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:22:57,216 INFO L263 TraceCheckSpWp]: Trace formula consists of 804 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 04:22:57,217 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:22:57,532 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-18 04:22:57,532 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 04:22:58,190 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-18 04:22:58,191 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:22:58,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1150977886] [2021-12-18 04:22:58,191 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1150977886] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 04:22:58,191 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-18 04:22:58,191 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2021-12-18 04:22:58,191 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1271171873] [2021-12-18 04:22:58,191 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-18 04:22:58,192 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-18 04:22:58,192 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:22:58,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-18 04:22:58,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-18 04:22:58,193 INFO L87 Difference]: Start difference. First operand 668 states and 942 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-18 04:22:58,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:22:58,863 INFO L93 Difference]: Finished difference Result 1336 states and 1886 transitions. [2021-12-18 04:22:58,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-18 04:22:58,864 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 46 [2021-12-18 04:22:58,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:22:58,868 INFO L225 Difference]: With dead ends: 1336 [2021-12-18 04:22:58,868 INFO L226 Difference]: Without dead ends: 677 [2021-12-18 04:22:58,870 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=53, Invalid=79, Unknown=0, NotChecked=0, Total=132 [2021-12-18 04:22:58,871 INFO L933 BasicCegarLoop]: 939 mSDtfsCounter, 11 mSDsluCounter, 2812 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 3751 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-18 04:22:58,871 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11 Valid, 3751 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-18 04:22:58,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 677 states. [2021-12-18 04:22:58,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 677 to 677. [2021-12-18 04:22:58,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 677 states, 506 states have (on average 1.359683794466403) internal successors, (688), 513 states have internal predecessors, (688), 133 states have call successors, (133), 38 states have call predecessors, (133), 37 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2021-12-18 04:22:58,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 677 states to 677 states and 953 transitions. [2021-12-18 04:22:58,891 INFO L78 Accepts]: Start accepts. Automaton has 677 states and 953 transitions. Word has length 46 [2021-12-18 04:22:58,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:22:58,891 INFO L470 AbstractCegarLoop]: Abstraction has 677 states and 953 transitions. [2021-12-18 04:22:58,892 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-18 04:22:58,892 INFO L276 IsEmpty]: Start isEmpty. Operand 677 states and 953 transitions. [2021-12-18 04:22:58,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-18 04:22:58,893 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:22:58,894 INFO L514 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:22:58,926 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-12-18 04:22:59,108 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:22:59,108 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:22:59,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:22:59,109 INFO L85 PathProgramCache]: Analyzing trace with hash 728136240, now seen corresponding path program 2 times [2021-12-18 04:22:59,109 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:22:59,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1538771942] [2021-12-18 04:22:59,110 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-18 04:22:59,110 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:22:59,110 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:22:59,112 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:22:59,113 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-18 04:22:59,512 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-18 04:22:59,512 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-18 04:22:59,529 INFO L263 TraceCheckSpWp]: Trace formula consists of 755 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 04:22:59,531 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:22:59,787 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-18 04:22:59,787 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:22:59,787 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:22:59,787 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1538771942] [2021-12-18 04:22:59,787 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1538771942] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:22:59,787 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:22:59,787 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 04:22:59,787 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [114608720] [2021-12-18 04:22:59,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:22:59,788 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 04:22:59,788 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:22:59,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 04:22:59,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:22:59,788 INFO L87 Difference]: Start difference. First operand 677 states and 953 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:23:00,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:00,218 INFO L93 Difference]: Finished difference Result 1955 states and 2762 transitions. [2021-12-18 04:23:00,218 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 04:23:00,219 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 49 [2021-12-18 04:23:00,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:00,224 INFO L225 Difference]: With dead ends: 1955 [2021-12-18 04:23:00,224 INFO L226 Difference]: Without dead ends: 1298 [2021-12-18 04:23:00,226 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 47 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:23:00,226 INFO L933 BasicCegarLoop]: 1075 mSDtfsCounter, 895 mSDsluCounter, 906 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 1981 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:00,226 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [895 Valid, 1981 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-18 04:23:00,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1298 states. [2021-12-18 04:23:00,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1298 to 1298. [2021-12-18 04:23:00,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1298 states, 968 states have (on average 1.3646694214876034) internal successors, (1321), 982 states have internal predecessors, (1321), 256 states have call successors, (256), 74 states have call predecessors, (256), 73 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2021-12-18 04:23:00,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1298 states to 1298 states and 1832 transitions. [2021-12-18 04:23:00,261 INFO L78 Accepts]: Start accepts. Automaton has 1298 states and 1832 transitions. Word has length 49 [2021-12-18 04:23:00,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:00,261 INFO L470 AbstractCegarLoop]: Abstraction has 1298 states and 1832 transitions. [2021-12-18 04:23:00,261 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-18 04:23:00,262 INFO L276 IsEmpty]: Start isEmpty. Operand 1298 states and 1832 transitions. [2021-12-18 04:23:00,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-12-18 04:23:00,263 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:00,264 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:00,277 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:00,477 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:00,477 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:00,478 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:00,478 INFO L85 PathProgramCache]: Analyzing trace with hash -602378178, now seen corresponding path program 1 times [2021-12-18 04:23:00,479 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:00,479 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [618474755] [2021-12-18 04:23:00,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:00,479 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:00,479 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:00,480 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:00,481 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-18 04:23:01,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:01,252 INFO L263 TraceCheckSpWp]: Trace formula consists of 1338 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-18 04:23:01,256 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:01,706 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-18 04:23:01,706 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:01,707 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:01,707 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [618474755] [2021-12-18 04:23:01,707 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [618474755] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:01,707 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:01,707 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:23:01,707 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [485002028] [2021-12-18 04:23:01,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:01,707 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:23:01,707 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:01,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:23:01,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:23:01,708 INFO L87 Difference]: Start difference. First operand 1298 states and 1832 transitions. Second operand has 6 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-18 04:23:03,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:03,713 INFO L93 Difference]: Finished difference Result 2925 states and 4194 transitions. [2021-12-18 04:23:03,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:23:03,736 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 67 [2021-12-18 04:23:03,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:03,742 INFO L225 Difference]: With dead ends: 2925 [2021-12-18 04:23:03,742 INFO L226 Difference]: Without dead ends: 1647 [2021-12-18 04:23:03,747 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:23:03,748 INFO L933 BasicCegarLoop]: 1450 mSDtfsCounter, 431 mSDsluCounter, 5282 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 516 SdHoareTripleChecker+Valid, 6732 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:03,749 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [516 Valid, 6732 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2021-12-18 04:23:03,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1647 states. [2021-12-18 04:23:03,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1647 to 1298. [2021-12-18 04:23:03,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1298 states, 968 states have (on average 1.3636363636363635) internal successors, (1320), 982 states have internal predecessors, (1320), 256 states have call successors, (256), 74 states have call predecessors, (256), 73 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2021-12-18 04:23:03,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1298 states to 1298 states and 1831 transitions. [2021-12-18 04:23:03,792 INFO L78 Accepts]: Start accepts. Automaton has 1298 states and 1831 transitions. Word has length 67 [2021-12-18 04:23:03,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:03,793 INFO L470 AbstractCegarLoop]: Abstraction has 1298 states and 1831 transitions. [2021-12-18 04:23:03,793 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-18 04:23:03,793 INFO L276 IsEmpty]: Start isEmpty. Operand 1298 states and 1831 transitions. [2021-12-18 04:23:03,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-12-18 04:23:03,795 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:03,795 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:03,823 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-18 04:23:04,020 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:04,020 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:04,021 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:04,021 INFO L85 PathProgramCache]: Analyzing trace with hash 1887150784, now seen corresponding path program 1 times [2021-12-18 04:23:04,022 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:04,022 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [452237826] [2021-12-18 04:23:04,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:04,022 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:04,022 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:04,024 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:04,025 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-18 04:23:04,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:04,951 INFO L263 TraceCheckSpWp]: Trace formula consists of 1338 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 04:23:04,954 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:05,734 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-18 04:23:05,734 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:05,734 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:05,734 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [452237826] [2021-12-18 04:23:05,734 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [452237826] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:05,734 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:05,734 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:23:05,734 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [972663317] [2021-12-18 04:23:05,734 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:05,735 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:23:05,735 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:05,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:23:05,735 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:23:05,735 INFO L87 Difference]: Start difference. First operand 1298 states and 1831 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-18 04:23:06,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:06,141 INFO L93 Difference]: Finished difference Result 3851 states and 5499 transitions. [2021-12-18 04:23:06,141 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:23:06,141 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 67 [2021-12-18 04:23:06,142 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:06,152 INFO L225 Difference]: With dead ends: 3851 [2021-12-18 04:23:06,152 INFO L226 Difference]: Without dead ends: 2563 [2021-12-18 04:23:06,156 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:23:06,157 INFO L933 BasicCegarLoop]: 1124 mSDtfsCounter, 895 mSDsluCounter, 3181 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 4305 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:06,157 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [895 Valid, 4305 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-18 04:23:06,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2563 states. [2021-12-18 04:23:06,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2563 to 2563. [2021-12-18 04:23:06,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2563 states, 1910 states have (on average 1.3638743455497382) internal successors, (2605), 1938 states have internal predecessors, (2605), 507 states have call successors, (507), 146 states have call predecessors, (507), 145 states have return successors, (536), 494 states have call predecessors, (536), 506 states have call successors, (536) [2021-12-18 04:23:06,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2563 states to 2563 states and 3648 transitions. [2021-12-18 04:23:06,231 INFO L78 Accepts]: Start accepts. Automaton has 2563 states and 3648 transitions. Word has length 67 [2021-12-18 04:23:06,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:06,233 INFO L470 AbstractCegarLoop]: Abstraction has 2563 states and 3648 transitions. [2021-12-18 04:23:06,234 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-18 04:23:06,234 INFO L276 IsEmpty]: Start isEmpty. Operand 2563 states and 3648 transitions. [2021-12-18 04:23:06,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-18 04:23:06,239 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:06,239 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:06,270 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:06,459 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:06,459 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:06,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:06,460 INFO L85 PathProgramCache]: Analyzing trace with hash 510620113, now seen corresponding path program 1 times [2021-12-18 04:23:06,461 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:06,461 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1580996349] [2021-12-18 04:23:06,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:06,461 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:06,461 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:06,480 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:06,482 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-18 04:23:07,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:07,297 INFO L263 TraceCheckSpWp]: Trace formula consists of 1525 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 04:23:07,300 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:07,910 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-12-18 04:23:07,910 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:07,911 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:07,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1580996349] [2021-12-18 04:23:07,911 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1580996349] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:07,911 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:07,911 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 04:23:07,911 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [434481356] [2021-12-18 04:23:07,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:07,911 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 04:23:07,911 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:07,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 04:23:07,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:23:07,912 INFO L87 Difference]: Start difference. First operand 2563 states and 3648 transitions. Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-18 04:23:08,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:08,384 INFO L93 Difference]: Finished difference Result 6763 states and 9544 transitions. [2021-12-18 04:23:08,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 04:23:08,385 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2021-12-18 04:23:08,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:08,401 INFO L225 Difference]: With dead ends: 6763 [2021-12-18 04:23:08,401 INFO L226 Difference]: Without dead ends: 4218 [2021-12-18 04:23:08,407 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:23:08,408 INFO L933 BasicCegarLoop]: 1095 mSDtfsCounter, 603 mSDsluCounter, 894 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 603 SdHoareTripleChecker+Valid, 1989 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:08,408 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [603 Valid, 1989 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-18 04:23:08,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4218 states. [2021-12-18 04:23:08,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4218 to 4205. [2021-12-18 04:23:08,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4205 states, 3114 states have (on average 1.3477842003853564) internal successors, (4197), 3162 states have internal predecessors, (4197), 829 states have call successors, (829), 262 states have call predecessors, (829), 261 states have return successors, (876), 808 states have call predecessors, (876), 828 states have call successors, (876) [2021-12-18 04:23:08,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4205 states to 4205 states and 5902 transitions. [2021-12-18 04:23:08,590 INFO L78 Accepts]: Start accepts. Automaton has 4205 states and 5902 transitions. Word has length 117 [2021-12-18 04:23:08,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:08,591 INFO L470 AbstractCegarLoop]: Abstraction has 4205 states and 5902 transitions. [2021-12-18 04:23:08,591 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-18 04:23:08,592 INFO L276 IsEmpty]: Start isEmpty. Operand 4205 states and 5902 transitions. [2021-12-18 04:23:08,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2021-12-18 04:23:08,597 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:08,597 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:08,626 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:08,819 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:08,820 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:08,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:08,820 INFO L85 PathProgramCache]: Analyzing trace with hash -1507578268, now seen corresponding path program 1 times [2021-12-18 04:23:08,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:08,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1802233568] [2021-12-18 04:23:08,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:08,821 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:08,821 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:08,822 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:08,824 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-18 04:23:09,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:09,666 INFO L263 TraceCheckSpWp]: Trace formula consists of 1545 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 04:23:09,669 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:10,452 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2021-12-18 04:23:10,452 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:10,452 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:10,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1802233568] [2021-12-18 04:23:10,452 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1802233568] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:10,452 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:10,452 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 04:23:10,452 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024072114] [2021-12-18 04:23:10,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:10,453 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 04:23:10,453 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:10,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 04:23:10,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:23:10,453 INFO L87 Difference]: Start difference. First operand 4205 states and 5902 transitions. Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:23:10,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:10,772 INFO L93 Difference]: Finished difference Result 9818 states and 13766 transitions. [2021-12-18 04:23:10,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 04:23:10,773 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 134 [2021-12-18 04:23:10,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:10,797 INFO L225 Difference]: With dead ends: 9818 [2021-12-18 04:23:10,797 INFO L226 Difference]: Without dead ends: 5633 [2021-12-18 04:23:10,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:23:10,811 INFO L933 BasicCegarLoop]: 1279 mSDtfsCounter, 484 mSDsluCounter, 900 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 2179 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:10,811 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 2179 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-18 04:23:10,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5633 states. [2021-12-18 04:23:10,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5633 to 5598. [2021-12-18 04:23:10,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5598 states, 4174 states have (on average 1.35361763296598) internal successors, (5650), 4242 states have internal predecessors, (5650), 1066 states have call successors, (1066), 358 states have call predecessors, (1066), 357 states have return successors, (1129), 1029 states have call predecessors, (1129), 1065 states have call successors, (1129) [2021-12-18 04:23:10,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5598 states to 5598 states and 7845 transitions. [2021-12-18 04:23:10,995 INFO L78 Accepts]: Start accepts. Automaton has 5598 states and 7845 transitions. Word has length 134 [2021-12-18 04:23:10,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:10,995 INFO L470 AbstractCegarLoop]: Abstraction has 5598 states and 7845 transitions. [2021-12-18 04:23:10,996 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:23:10,996 INFO L276 IsEmpty]: Start isEmpty. Operand 5598 states and 7845 transitions. [2021-12-18 04:23:11,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2021-12-18 04:23:11,004 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:11,004 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:11,046 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:11,227 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:11,227 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:11,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:11,228 INFO L85 PathProgramCache]: Analyzing trace with hash 1851568064, now seen corresponding path program 1 times [2021-12-18 04:23:11,229 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:11,229 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1703779313] [2021-12-18 04:23:11,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:11,229 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:11,229 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:11,231 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:11,231 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-18 04:23:12,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:12,274 INFO L263 TraceCheckSpWp]: Trace formula consists of 1594 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 04:23:12,278 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:13,064 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-18 04:23:13,064 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:13,064 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:13,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1703779313] [2021-12-18 04:23:13,065 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1703779313] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:13,065 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:13,065 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:23:13,065 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [361297192] [2021-12-18 04:23:13,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:13,065 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:23:13,065 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:13,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:23:13,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:23:13,066 INFO L87 Difference]: Start difference. First operand 5598 states and 7845 transitions. Second operand has 5 states, 5 states have (on average 19.2) internal successors, (96), 5 states have internal predecessors, (96), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-12-18 04:23:14,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:14,399 INFO L93 Difference]: Finished difference Result 8540 states and 11939 transitions. [2021-12-18 04:23:14,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:23:14,401 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.2) internal successors, (96), 5 states have internal predecessors, (96), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 142 [2021-12-18 04:23:14,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:14,411 INFO L225 Difference]: With dead ends: 8540 [2021-12-18 04:23:14,411 INFO L226 Difference]: Without dead ends: 2963 [2021-12-18 04:23:14,420 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 138 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:23:14,421 INFO L933 BasicCegarLoop]: 941 mSDtfsCounter, 24 mSDsluCounter, 2813 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 3754 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:14,421 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [24 Valid, 3754 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-12-18 04:23:14,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2963 states. [2021-12-18 04:23:14,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2963 to 2875. [2021-12-18 04:23:14,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2875 states, 2147 states have (on average 1.351187703772706) internal successors, (2901), 2181 states have internal predecessors, (2901), 540 states have call successors, (540), 188 states have call predecessors, (540), 187 states have return successors, (571), 521 states have call predecessors, (571), 539 states have call successors, (571) [2021-12-18 04:23:14,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2875 states to 2875 states and 4012 transitions. [2021-12-18 04:23:14,513 INFO L78 Accepts]: Start accepts. Automaton has 2875 states and 4012 transitions. Word has length 142 [2021-12-18 04:23:14,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:14,513 INFO L470 AbstractCegarLoop]: Abstraction has 2875 states and 4012 transitions. [2021-12-18 04:23:14,514 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.2) internal successors, (96), 5 states have internal predecessors, (96), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-12-18 04:23:14,514 INFO L276 IsEmpty]: Start isEmpty. Operand 2875 states and 4012 transitions. [2021-12-18 04:23:14,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-12-18 04:23:14,520 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:14,520 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:14,554 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-12-18 04:23:14,735 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:14,735 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:14,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:14,736 INFO L85 PathProgramCache]: Analyzing trace with hash -1046565723, now seen corresponding path program 1 times [2021-12-18 04:23:14,737 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:14,737 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1019778097] [2021-12-18 04:23:14,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:14,737 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:14,738 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:14,739 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:14,755 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-18 04:23:15,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:16,000 INFO L263 TraceCheckSpWp]: Trace formula consists of 1651 conjuncts, 14 conjunts are in the unsatisfiable core [2021-12-18 04:23:16,004 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:16,913 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2021-12-18 04:23:16,913 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:16,913 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:16,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1019778097] [2021-12-18 04:23:16,913 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1019778097] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:16,913 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:16,913 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 04:23:16,913 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1617447166] [2021-12-18 04:23:16,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:16,914 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 04:23:16,914 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:16,914 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 04:23:16,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 04:23:16,914 INFO L87 Difference]: Start difference. First operand 2875 states and 4012 transitions. Second operand has 6 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 3 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-18 04:23:19,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:19,228 INFO L93 Difference]: Finished difference Result 5709 states and 7974 transitions. [2021-12-18 04:23:19,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 04:23:19,229 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 3 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 148 [2021-12-18 04:23:19,229 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:19,256 INFO L225 Difference]: With dead ends: 5709 [2021-12-18 04:23:19,256 INFO L226 Difference]: Without dead ends: 2880 [2021-12-18 04:23:19,263 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 148 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:23:19,265 INFO L933 BasicCegarLoop]: 945 mSDtfsCounter, 419 mSDsluCounter, 3272 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 502 SdHoareTripleChecker+Valid, 4217 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:19,265 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [502 Valid, 4217 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2021-12-18 04:23:19,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2880 states. [2021-12-18 04:23:19,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2880 to 2875. [2021-12-18 04:23:19,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2875 states, 2147 states have (on average 1.3502561714019563) internal successors, (2899), 2181 states have internal predecessors, (2899), 540 states have call successors, (540), 188 states have call predecessors, (540), 187 states have return successors, (571), 521 states have call predecessors, (571), 539 states have call successors, (571) [2021-12-18 04:23:19,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2875 states to 2875 states and 4010 transitions. [2021-12-18 04:23:19,381 INFO L78 Accepts]: Start accepts. Automaton has 2875 states and 4010 transitions. Word has length 148 [2021-12-18 04:23:19,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:19,381 INFO L470 AbstractCegarLoop]: Abstraction has 2875 states and 4010 transitions. [2021-12-18 04:23:19,381 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 3 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-18 04:23:19,381 INFO L276 IsEmpty]: Start isEmpty. Operand 2875 states and 4010 transitions. [2021-12-18 04:23:19,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-12-18 04:23:19,387 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:19,387 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:19,425 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:19,603 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:19,603 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:19,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:19,604 INFO L85 PathProgramCache]: Analyzing trace with hash 829917095, now seen corresponding path program 1 times [2021-12-18 04:23:19,605 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:19,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [776875982] [2021-12-18 04:23:19,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:19,605 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:19,605 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:19,620 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:19,639 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-18 04:23:20,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:20,974 INFO L263 TraceCheckSpWp]: Trace formula consists of 1651 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-18 04:23:20,978 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:21,974 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2021-12-18 04:23:21,974 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:21,974 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:21,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [776875982] [2021-12-18 04:23:21,975 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [776875982] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:21,975 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:21,975 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-18 04:23:21,975 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1859537184] [2021-12-18 04:23:21,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:21,975 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-18 04:23:21,975 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:21,975 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-18 04:23:21,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:23:21,976 INFO L87 Difference]: Start difference. First operand 2875 states and 4010 transitions. Second operand has 7 states, 7 states have (on average 14.0) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:23:22,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:22,201 INFO L93 Difference]: Finished difference Result 5736 states and 8025 transitions. [2021-12-18 04:23:22,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 04:23:22,202 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 14.0) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 148 [2021-12-18 04:23:22,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:22,220 INFO L225 Difference]: With dead ends: 5736 [2021-12-18 04:23:22,220 INFO L226 Difference]: Without dead ends: 2907 [2021-12-18 04:23:22,227 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-18 04:23:22,227 INFO L933 BasicCegarLoop]: 938 mSDtfsCounter, 0 mSDsluCounter, 4685 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 5623 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:22,228 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 5623 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-18 04:23:22,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2907 states. [2021-12-18 04:23:22,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2907 to 2903. [2021-12-18 04:23:22,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2903 states, 2167 states have (on average 1.3470235348407937) internal successors, (2919), 2201 states have internal predecessors, (2919), 540 states have call successors, (540), 188 states have call predecessors, (540), 195 states have return successors, (601), 529 states have call predecessors, (601), 539 states have call successors, (601) [2021-12-18 04:23:22,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2903 states to 2903 states and 4060 transitions. [2021-12-18 04:23:22,310 INFO L78 Accepts]: Start accepts. Automaton has 2903 states and 4060 transitions. Word has length 148 [2021-12-18 04:23:22,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:22,310 INFO L470 AbstractCegarLoop]: Abstraction has 2903 states and 4060 transitions. [2021-12-18 04:23:22,311 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 14.0) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-18 04:23:22,311 INFO L276 IsEmpty]: Start isEmpty. Operand 2903 states and 4060 transitions. [2021-12-18 04:23:22,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2021-12-18 04:23:22,316 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:22,316 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:22,355 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Ended with exit code 0 [2021-12-18 04:23:22,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:22,539 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:22,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:22,540 INFO L85 PathProgramCache]: Analyzing trace with hash 198615179, now seen corresponding path program 1 times [2021-12-18 04:23:22,541 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:22,541 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1225680660] [2021-12-18 04:23:22,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:22,541 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:22,541 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:22,542 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:22,544 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-18 04:23:23,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:23,960 INFO L263 TraceCheckSpWp]: Trace formula consists of 1668 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-18 04:23:23,963 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:24,604 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-18 04:23:24,604 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:24,604 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:24,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1225680660] [2021-12-18 04:23:24,604 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1225680660] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:24,604 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:24,604 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 04:23:24,604 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2100005851] [2021-12-18 04:23:24,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:24,605 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 04:23:24,605 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:24,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 04:23:24,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:23:24,605 INFO L87 Difference]: Start difference. First operand 2903 states and 4060 transitions. Second operand has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2021-12-18 04:23:24,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:24,737 INFO L93 Difference]: Finished difference Result 5802 states and 8215 transitions. [2021-12-18 04:23:24,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 04:23:24,738 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) Word has length 154 [2021-12-18 04:23:24,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:24,746 INFO L225 Difference]: With dead ends: 5802 [2021-12-18 04:23:24,747 INFO L226 Difference]: Without dead ends: 2945 [2021-12-18 04:23:24,755 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 150 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 04:23:24,755 INFO L933 BasicCegarLoop]: 937 mSDtfsCounter, 2 mSDsluCounter, 2806 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3743 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:24,756 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 3743 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 04:23:24,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2945 states. [2021-12-18 04:23:24,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2945 to 2933. [2021-12-18 04:23:24,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2933 states, 2188 states have (on average 1.3436928702010968) internal successors, (2940), 2225 states have internal predecessors, (2940), 540 states have call successors, (540), 188 states have call predecessors, (540), 204 states have return successors, (614), 535 states have call predecessors, (614), 539 states have call successors, (614) [2021-12-18 04:23:24,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2933 states to 2933 states and 4094 transitions. [2021-12-18 04:23:24,849 INFO L78 Accepts]: Start accepts. Automaton has 2933 states and 4094 transitions. Word has length 154 [2021-12-18 04:23:24,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:24,849 INFO L470 AbstractCegarLoop]: Abstraction has 2933 states and 4094 transitions. [2021-12-18 04:23:24,849 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2021-12-18 04:23:24,849 INFO L276 IsEmpty]: Start isEmpty. Operand 2933 states and 4094 transitions. [2021-12-18 04:23:24,854 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-12-18 04:23:24,854 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:24,855 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:24,888 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:25,080 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:25,080 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:25,080 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:25,080 INFO L85 PathProgramCache]: Analyzing trace with hash -1478023259, now seen corresponding path program 1 times [2021-12-18 04:23:25,081 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:25,081 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [913580200] [2021-12-18 04:23:25,082 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:25,082 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:25,082 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:25,083 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:25,083 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-18 04:23:26,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:26,404 INFO L263 TraceCheckSpWp]: Trace formula consists of 1694 conjuncts, 33 conjunts are in the unsatisfiable core [2021-12-18 04:23:26,408 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:28,432 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2021-12-18 04:23:28,432 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:28,433 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:28,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [913580200] [2021-12-18 04:23:28,433 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [913580200] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:28,433 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:28,433 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-18 04:23:28,433 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694884289] [2021-12-18 04:23:28,433 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:28,433 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-18 04:23:28,433 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:28,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-18 04:23:28,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2021-12-18 04:23:28,434 INFO L87 Difference]: Start difference. First operand 2933 states and 4094 transitions. Second operand has 12 states, 12 states have (on average 8.583333333333334) internal successors, (103), 9 states have internal predecessors, (103), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 04:23:29,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:29,619 INFO L93 Difference]: Finished difference Result 5858 states and 8257 transitions. [2021-12-18 04:23:29,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-18 04:23:29,620 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 8.583333333333334) internal successors, (103), 9 states have internal predecessors, (103), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2021-12-18 04:23:29,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:29,628 INFO L225 Difference]: With dead ends: 5858 [2021-12-18 04:23:29,628 INFO L226 Difference]: Without dead ends: 2971 [2021-12-18 04:23:29,635 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 151 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2021-12-18 04:23:29,635 INFO L933 BasicCegarLoop]: 947 mSDtfsCounter, 12 mSDsluCounter, 9435 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 10382 SdHoareTripleChecker+Invalid, 94 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:29,635 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [12 Valid, 10382 Invalid, 94 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-18 04:23:29,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2971 states. [2021-12-18 04:23:29,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2971 to 2960. [2021-12-18 04:23:29,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2960 states, 2208 states have (on average 1.3378623188405796) internal successors, (2954), 2243 states have internal predecessors, (2954), 540 states have call successors, (540), 188 states have call predecessors, (540), 211 states have return successors, (628), 544 states have call predecessors, (628), 539 states have call successors, (628) [2021-12-18 04:23:29,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2960 states to 2960 states and 4122 transitions. [2021-12-18 04:23:29,691 INFO L78 Accepts]: Start accepts. Automaton has 2960 states and 4122 transitions. Word has length 161 [2021-12-18 04:23:29,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:29,692 INFO L470 AbstractCegarLoop]: Abstraction has 2960 states and 4122 transitions. [2021-12-18 04:23:29,692 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 8.583333333333334) internal successors, (103), 9 states have internal predecessors, (103), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 04:23:29,692 INFO L276 IsEmpty]: Start isEmpty. Operand 2960 states and 4122 transitions. [2021-12-18 04:23:29,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-12-18 04:23:29,697 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:29,697 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:29,731 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:29,923 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:29,923 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:29,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:29,924 INFO L85 PathProgramCache]: Analyzing trace with hash -1188259002, now seen corresponding path program 1 times [2021-12-18 04:23:29,925 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:29,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2003447043] [2021-12-18 04:23:29,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:29,925 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:29,925 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:29,932 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:29,933 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-18 04:23:31,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:31,252 INFO L263 TraceCheckSpWp]: Trace formula consists of 1697 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 04:23:31,255 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:32,446 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 80 proven. 0 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2021-12-18 04:23:32,446 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:32,447 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:32,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2003447043] [2021-12-18 04:23:32,447 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2003447043] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:32,447 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:32,447 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 04:23:32,447 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18916740] [2021-12-18 04:23:32,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:32,447 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 04:23:32,447 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:32,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 04:23:32,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:23:32,448 INFO L87 Difference]: Start difference. First operand 2960 states and 4122 transitions. Second operand has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-18 04:23:32,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:32,783 INFO L93 Difference]: Finished difference Result 6727 states and 9365 transitions. [2021-12-18 04:23:32,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 04:23:32,784 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 172 [2021-12-18 04:23:32,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:32,798 INFO L225 Difference]: With dead ends: 6727 [2021-12-18 04:23:32,798 INFO L226 Difference]: Without dead ends: 3813 [2021-12-18 04:23:32,807 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 04:23:32,808 INFO L933 BasicCegarLoop]: 1124 mSDtfsCounter, 650 mSDsluCounter, 725 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 650 SdHoareTripleChecker+Valid, 1849 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:32,808 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [650 Valid, 1849 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-18 04:23:32,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3813 states. [2021-12-18 04:23:32,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3813 to 3782. [2021-12-18 04:23:32,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3782 states, 2844 states have (on average 1.339310829817159) internal successors, (3809), 2887 states have internal predecessors, (3809), 656 states have call successors, (656), 248 states have call predecessors, (656), 281 states have return successors, (774), 664 states have call predecessors, (774), 655 states have call successors, (774) [2021-12-18 04:23:32,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3782 states to 3782 states and 5239 transitions. [2021-12-18 04:23:32,888 INFO L78 Accepts]: Start accepts. Automaton has 3782 states and 5239 transitions. Word has length 172 [2021-12-18 04:23:32,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:32,888 INFO L470 AbstractCegarLoop]: Abstraction has 3782 states and 5239 transitions. [2021-12-18 04:23:32,888 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2021-12-18 04:23:32,888 INFO L276 IsEmpty]: Start isEmpty. Operand 3782 states and 5239 transitions. [2021-12-18 04:23:32,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2021-12-18 04:23:32,894 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:32,894 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:32,931 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:33,107 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:33,107 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:33,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:33,108 INFO L85 PathProgramCache]: Analyzing trace with hash -1891071574, now seen corresponding path program 1 times [2021-12-18 04:23:33,109 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:33,109 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [276010151] [2021-12-18 04:23:33,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:33,109 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:33,109 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:33,111 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:33,112 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-18 04:23:34,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 04:23:34,468 INFO L263 TraceCheckSpWp]: Trace formula consists of 1708 conjuncts, 33 conjunts are in the unsatisfiable core [2021-12-18 04:23:34,484 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 04:23:36,545 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-18 04:23:36,546 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 04:23:36,546 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 04:23:36,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [276010151] [2021-12-18 04:23:36,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [276010151] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 04:23:36,546 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 04:23:36,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-18 04:23:36,546 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [884738741] [2021-12-18 04:23:36,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 04:23:36,546 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-18 04:23:36,546 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 04:23:36,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-18 04:23:36,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2021-12-18 04:23:36,547 INFO L87 Difference]: Start difference. First operand 3782 states and 5239 transitions. Second operand has 12 states, 12 states have (on average 9.0) internal successors, (108), 9 states have internal predecessors, (108), 3 states have call successors, (20), 2 states have call predecessors, (20), 5 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:23:37,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 04:23:37,808 INFO L93 Difference]: Finished difference Result 7545 states and 10542 transitions. [2021-12-18 04:23:37,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-18 04:23:37,809 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.0) internal successors, (108), 9 states have internal predecessors, (108), 3 states have call successors, (20), 2 states have call predecessors, (20), 5 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) Word has length 169 [2021-12-18 04:23:37,809 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 04:23:37,818 INFO L225 Difference]: With dead ends: 7545 [2021-12-18 04:23:37,818 INFO L226 Difference]: Without dead ends: 3809 [2021-12-18 04:23:37,824 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2021-12-18 04:23:37,825 INFO L933 BasicCegarLoop]: 945 mSDtfsCounter, 12 mSDsluCounter, 9421 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 10366 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-18 04:23:37,825 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [12 Valid, 10366 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-18 04:23:37,829 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3809 states. [2021-12-18 04:23:37,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3809 to 3803. [2021-12-18 04:23:37,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3803 states, 2863 states have (on average 1.3370590289905693) internal successors, (3828), 2899 states have internal predecessors, (3828), 656 states have call successors, (656), 248 states have call predecessors, (656), 283 states have return successors, (777), 673 states have call predecessors, (777), 655 states have call successors, (777) [2021-12-18 04:23:37,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3803 states to 3803 states and 5261 transitions. [2021-12-18 04:23:37,899 INFO L78 Accepts]: Start accepts. Automaton has 3803 states and 5261 transitions. Word has length 169 [2021-12-18 04:23:37,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 04:23:37,899 INFO L470 AbstractCegarLoop]: Abstraction has 3803 states and 5261 transitions. [2021-12-18 04:23:37,899 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.0) internal successors, (108), 9 states have internal predecessors, (108), 3 states have call successors, (20), 2 states have call predecessors, (20), 5 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 04:23:37,899 INFO L276 IsEmpty]: Start isEmpty. Operand 3803 states and 5261 transitions. [2021-12-18 04:23:37,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2021-12-18 04:23:37,905 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 04:23:37,906 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:23:37,943 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-12-18 04:23:38,119 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:23:38,119 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 04:23:38,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 04:23:38,120 INFO L85 PathProgramCache]: Analyzing trace with hash -1401601602, now seen corresponding path program 1 times [2021-12-18 04:23:38,121 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 04:23:38,121 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1813748663] [2021-12-18 04:23:38,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 04:23:38,121 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 04:23:38,121 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 04:23:38,128 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 04:23:38,129 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-12-18 04:23:53,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 04:23:53,361 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-18 04:24:11,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 04:24:13,108 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-18 04:24:13,109 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-18 04:24:13,109 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-18 04:24:13,180 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-12-18 04:24:13,316 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 04:24:13,319 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 04:24:13,323 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-18 04:24:13,355 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-18 04:24:13,369 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,370 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,370 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,370 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,370 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,370 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,371 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,372 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,372 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,372 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-18 04:24:13,531 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.12 04:24:13 BoogieIcfgContainer [2021-12-18 04:24:13,531 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-18 04:24:13,532 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-18 04:24:13,532 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-18 04:24:13,533 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-18 04:24:13,533 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 04:22:55" (3/4) ... [2021-12-18 04:24:13,535 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-18 04:24:13,535 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-18 04:24:13,536 INFO L158 Benchmark]: Toolchain (without parser) took 94395.55ms. Allocated memory was 75.5MB in the beginning and 549.5MB in the end (delta: 474.0MB). Free memory was 51.0MB in the beginning and 149.4MB in the end (delta: -98.4MB). Peak memory consumption was 375.4MB. Max. memory is 16.1GB. [2021-12-18 04:24:13,536 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 52.4MB. Free memory was 35.0MB in the beginning and 34.9MB in the end (delta: 39.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 04:24:13,537 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1580.17ms. Allocated memory was 75.5MB in the beginning and 228.6MB in the end (delta: 153.1MB). Free memory was 50.8MB in the beginning and 129.1MB in the end (delta: -78.3MB). Peak memory consumption was 104.3MB. Max. memory is 16.1GB. [2021-12-18 04:24:13,537 INFO L158 Benchmark]: Boogie Procedure Inliner took 126.26ms. Allocated memory is still 228.6MB. Free memory was 129.1MB in the beginning and 116.5MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-18 04:24:13,537 INFO L158 Benchmark]: Boogie Preprocessor took 138.85ms. Allocated memory is still 228.6MB. Free memory was 116.5MB in the beginning and 99.8MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-18 04:24:13,538 INFO L158 Benchmark]: RCFGBuilder took 14208.19ms. Allocated memory was 228.6MB in the beginning and 457.2MB in the end (delta: 228.6MB). Free memory was 99.8MB in the beginning and 237.1MB in the end (delta: -137.4MB). Peak memory consumption was 100.5MB. Max. memory is 16.1GB. [2021-12-18 04:24:13,538 INFO L158 Benchmark]: TraceAbstraction took 78331.70ms. Allocated memory was 457.2MB in the beginning and 549.5MB in the end (delta: 92.3MB). Free memory was 237.1MB in the beginning and 149.4MB in the end (delta: 87.8MB). Peak memory consumption was 179.9MB. Max. memory is 16.1GB. [2021-12-18 04:24:13,538 INFO L158 Benchmark]: Witness Printer took 2.92ms. Allocated memory is still 549.5MB. Free memory is still 149.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 04:24:13,541 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 52.4MB. Free memory was 35.0MB in the beginning and 34.9MB in the end (delta: 39.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1580.17ms. Allocated memory was 75.5MB in the beginning and 228.6MB in the end (delta: 153.1MB). Free memory was 50.8MB in the beginning and 129.1MB in the end (delta: -78.3MB). Peak memory consumption was 104.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 126.26ms. Allocated memory is still 228.6MB. Free memory was 129.1MB in the beginning and 116.5MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 138.85ms. Allocated memory is still 228.6MB. Free memory was 116.5MB in the beginning and 99.8MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * RCFGBuilder took 14208.19ms. Allocated memory was 228.6MB in the beginning and 457.2MB in the end (delta: 228.6MB). Free memory was 99.8MB in the beginning and 237.1MB in the end (delta: -137.4MB). Peak memory consumption was 100.5MB. Max. memory is 16.1GB. * TraceAbstraction took 78331.70ms. Allocated memory was 457.2MB in the beginning and 549.5MB in the end (delta: 92.3MB). Free memory was 237.1MB in the beginning and 149.4MB in the end (delta: 87.8MB). Peak memory consumption was 179.9MB. Max. memory is 16.1GB. * Witness Printer took 2.92ms. Allocated memory is still 549.5MB. Free memory is still 149.4MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7323]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8887. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=2, ldvarg3={471:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=4, tmp___0=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=2, ldvarg3={471:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg3={471:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg3={471:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={167:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={471:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={1073742210:0}, descriptor.flags=0, descriptor___0={897:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={1073742210:0}, descriptor.flags=0, descriptor___0={897:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND FALSE !(tmp != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={1073742210:0}, descriptor___0={897:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, sem={163:0}, sem={163:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=1560, tmp___0=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, ldv_func_arg1={165:0}, ldv_func_arg1={165:0}, ldv_func_arg2={169:170}, ldv_func_arg2={169:170}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, descriptor={1073742210:0}, descriptor___0={897:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, descriptor={1073742210:0}, descriptor___0={897:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND FALSE !(tmp___0 != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, descriptor={1073742210:0}, descriptor___0={897:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=6864, tmp___0=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=232, tmp___0=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9022] COND TRUE ldv_state_variable_1 == 1 [L9023] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8796] int ret ; [L8797] struct usb_card_rec *card ; [L8799] EXPR adapter->card [L8799] card = (struct usb_card_rec *)adapter->card [L8800] EXPR card->usb_boot_state VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->usb_boot_state=0, fw={0:0}, fw={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8800] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8812] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8393] struct usb_card_rec *card ; [L8394] int i ; [L8395] int tmp ; [L8396] int tmp___0 ; [L8398] EXPR adapter->card [L8398] card = (struct usb_card_rec *)adapter->card [L8399] card->rx_cmd.adapter = adapter [L8400] EXPR card->rx_cmd_ep [L8400] card->rx_cmd.ep = card->rx_cmd_ep [L8401] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=null, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7271] void *p ; [L7272] void *tmp ; [L7273] int tmp___0 ; [L7275] tmp___0 = __VERIFIER_nondet_int() [L7276] COND FALSE !(tmp___0 != 0) [L7279] tmp = malloc(size) [L7280] p = tmp VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={384:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={384:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={384:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={384:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7282] return (p); VAL [\old(size)=184, \result={384:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={384:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={384:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=null, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, arg0=null, arg1=208, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={384:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] return ldv_malloc(sizeof(struct urb)); [L8401] RET, EXPR usb_alloc_urb(0, 208U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_alloc_urb(0, 208U)={384:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8401] card->rx_cmd.urb = usb_alloc_urb(0, 208U) [L8402] EXPR card->rx_cmd.urb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.urb={384:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8402] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8407] CALL, EXPR ldv_dev_alloc_skb_14(2048U) VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND FALSE !(tmp___0 != 0) [L7296] EXPR, FCALL calloc(1UL, size) [L7296] tmp = calloc(1UL, size) [L7297] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, calloc(1UL, size)={261:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={261:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={261:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, calloc(1UL, size)={261:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={261:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={261:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7299] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={261:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, calloc(1UL, size)={261:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={261:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={261:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={261:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={261:0}, tmp___7={261:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND FALSE !(! skb) [L9387] CALL ldv_set_add(LDV_SKBS, skb) [L9255] int i ; [L9257] i = 0 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, e={261:0}, e={261:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9258] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, e={261:0}, e={261:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9259] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, e={261:0}, e={261:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9269] COND TRUE last_index < 15 [L9270] set_impl[last_index] = e [L9271] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, e={261:0}, e={261:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9387] RET ldv_set_add(LDV_SKBS, skb) [L9388] return (skb); VAL [\old(last_index)=0, \result={261:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={261:0}, tmp___7={261:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={261:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=0, \old(length)=2048, \result={261:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={261:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] RET, EXPR ldv_dev_alloc_skb_14(2048U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, ldv_dev_alloc_skb_14(2048U)={261:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] card->rx_cmd.skb = ldv_dev_alloc_skb_14(2048U) [L8408] EXPR card->rx_cmd.skb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.skb={261:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8408] COND FALSE !((unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0)) [L8413] CALL, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7841] struct mwifiex_adapter *adapter ; [L7842] struct usb_card_rec *card ; [L7843] unsigned int tmp ; [L7844] int tmp___0 ; [L7846] EXPR ctx->adapter [L7846] adapter = ctx->adapter [L7847] EXPR adapter->card [L7847] card = (struct usb_card_rec *)adapter->card [L7848] EXPR card->rx_cmd_ep [L7848] EXPR ctx->ep VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={261:0}, add_remove_card_sem={163:0}, card={-9223372036854775641:-25}, card->rx_cmd_ep=-128, ctx={167:0}, ctx={167:0}, ctx->ep=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7848] COND TRUE (int )card->rx_cmd_ep != (int )ctx->ep [L7849] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp___0=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND TRUE ! skb [L9385] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=1, \old(length)=2048, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={261:0}, add_remove_card_sem={163:0}, card={-9223372036854775641:-25}, ctx={167:0}, ctx={167:0}, last_index=1, ldv_dev_alloc_skb_14((unsigned int )size)={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] ctx->skb = ldv_dev_alloc_skb_14((unsigned int )size) [L7850] EXPR ctx->skb VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={261:0}, add_remove_card_sem={163:0}, card={-9223372036854775641:-25}, ctx={167:0}, ctx={167:0}, ctx->skb={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7850] COND TRUE (unsigned long )ctx->skb == (unsigned long )((struct sk_buff *)0) [L7851] adapter->dev [L7853] return (-12); VAL [\old(last_index)=1, \old(size)=2048, \result=-12, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={261:0}, add_remove_card_sem={163:0}, card={-9223372036854775641:-25}, ctx={167:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] RET, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048)=-12, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] tmp = mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) [L8414] COND TRUE tmp != 0 [L8415] return (-1); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=4294967284, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8812] RET, EXPR mwifiex_usb_rx_init(adapter) [L8812] ret = mwifiex_usb_rx_init(adapter) [L8813] COND FALSE !(ret == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=4294967295, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8817] return (ret); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=4294967295, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9023] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L9024] ldv_state_variable_1 = 1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9061] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L9062] CALL mwifiex_usb_cleanup_module() [L8908] int tmp ; [L8910] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9477] return __VERIFIER_nondet_int(); [L8910] RET, EXPR down_interruptible(& add_remove_card_sem) [L8910] tmp = down_interruptible(& add_remove_card_sem) [L8911] COND FALSE !(tmp == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2147483648, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8915] user_rmmod = 1U [L8916] CALL ldv_usb_deregister_18(& mwifiex_usb_driver) [L9235] FCALL usb_deregister(arg) [L9236] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, arg={165:0}, arg={165:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L8916] RET ldv_usb_deregister_18(& mwifiex_usb_driver) [L9062] RET mwifiex_usb_cleanup_module() [L9063] ldv_state_variable_0 = 2 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={471:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9164] CALL ldv_check_final_state() [L9446] int tmp___7 ; [L9448] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L9337] return (last_index == 0); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9448] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L9448] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L9449] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp___7=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9451] CALL ldv_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L7323] reach_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={169:170}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 679 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 78.1s, OverallIterations: 15, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 11.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4608 SdHoareTripleChecker+Valid, 8.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4440 mSDsluCounter, 63724 SdHoareTripleChecker+Invalid, 8.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 49033 mSDsCounter, 39 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 615 IncrementalHoareTripleChecker+Invalid, 654 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 39 mSolverCounterUnsat, 14691 mSDtfsCounter, 615 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1669 GetRequests, 1598 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 5.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5598occurred in iteration=7, InterpolantAutomatonStates: 85, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.2s AutomataMinimizationTime, 14 MinimizatonAttempts, 554 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 23.1s SatisfiabilityAnalysisTime, 13.8s InterpolantComputationTime, 1805 NumberOfCodeBlocks, 1789 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1650 ConstructedInterpolants, 0 QuantifiedInterpolants, 2239 SizeOfPredicates, 58 NumberOfNonLiveVariables, 19761 ConjunctsInSsa, 139 ConjunctsInUnsatCore, 15 InterpolantComputations, 13 PerfectInterpolantSequences, 991/993 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-18 04:24:13,633 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample