./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 16:13:10,818 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 16:13:10,841 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 16:13:10,862 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 16:13:10,863 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 16:13:10,863 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 16:13:10,864 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 16:13:10,865 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 16:13:10,866 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 16:13:10,867 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 16:13:10,868 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 16:13:10,868 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 16:13:10,869 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 16:13:10,869 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 16:13:10,870 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 16:13:10,871 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 16:13:10,871 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 16:13:10,872 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 16:13:10,873 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 16:13:10,874 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 16:13:10,875 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 16:13:10,876 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 16:13:10,877 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 16:13:10,878 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 16:13:10,879 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 16:13:10,880 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 16:13:10,880 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 16:13:10,880 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 16:13:10,881 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 16:13:10,881 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 16:13:10,882 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 16:13:10,882 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 16:13:10,883 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 16:13:10,883 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 16:13:10,884 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 16:13:10,884 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 16:13:10,885 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 16:13:10,885 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 16:13:10,885 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 16:13:10,886 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 16:13:10,886 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 16:13:10,887 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-21 16:13:10,905 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 16:13:10,906 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 16:13:10,906 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 16:13:10,906 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 16:13:10,907 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 16:13:10,907 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 16:13:10,907 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 16:13:10,908 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 16:13:10,908 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 16:13:10,908 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 16:13:10,908 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 16:13:10,908 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 16:13:10,908 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 16:13:10,909 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 16:13:10,909 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 16:13:10,909 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 16:13:10,909 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 16:13:10,909 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 16:13:10,909 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 16:13:10,909 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 16:13:10,910 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 16:13:10,910 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 16:13:10,910 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 16:13:10,910 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 16:13:10,910 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 16:13:10,910 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 16:13:10,911 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 16:13:10,911 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 16:13:10,911 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 16:13:10,911 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 16:13:10,911 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 16:13:10,911 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b [2021-12-21 16:13:11,058 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 16:13:11,080 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 16:13:11,082 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 16:13:11,083 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 16:13:11,084 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 16:13:11,084 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2021-12-21 16:13:11,136 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1538b76ac/5f4c3946ae924761901b8b3cf0826f08/FLAGef4b19452 [2021-12-21 16:13:11,590 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 16:13:11,590 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2021-12-21 16:13:11,609 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1538b76ac/5f4c3946ae924761901b8b3cf0826f08/FLAGef4b19452 [2021-12-21 16:13:11,870 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1538b76ac/5f4c3946ae924761901b8b3cf0826f08 [2021-12-21 16:13:11,872 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 16:13:11,873 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 16:13:11,873 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 16:13:11,874 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 16:13:11,876 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 16:13:11,876 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 04:13:11" (1/1) ... [2021-12-21 16:13:11,877 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@52098cb5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:11, skipping insertion in model container [2021-12-21 16:13:11,877 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 04:13:11" (1/1) ... [2021-12-21 16:13:11,881 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 16:13:11,931 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 16:13:12,370 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2021-12-21 16:13:12,545 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 16:13:12,561 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 16:13:12,665 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2021-12-21 16:13:12,713 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 16:13:12,740 INFO L208 MainTranslator]: Completed translation [2021-12-21 16:13:12,742 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12 WrapperNode [2021-12-21 16:13:12,742 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 16:13:12,743 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 16:13:12,744 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 16:13:12,744 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 16:13:12,749 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,785 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,831 INFO L137 Inliner]: procedures = 101, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 961 [2021-12-21 16:13:12,837 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 16:13:12,838 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 16:13:12,838 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 16:13:12,838 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 16:13:12,844 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,844 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,862 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,871 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,912 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,917 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,922 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,931 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 16:13:12,939 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 16:13:12,940 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 16:13:12,940 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 16:13:12,941 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (1/1) ... [2021-12-21 16:13:12,947 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 16:13:12,955 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 16:13:12,967 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 16:13:12,986 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 16:13:13,015 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-21 16:13:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-21 16:13:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-21 16:13:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-21 16:13:13,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-21 16:13:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-21 16:13:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2021-12-21 16:13:13,016 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2021-12-21 16:13:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-21 16:13:13,017 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-21 16:13:13,017 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-21 16:13:13,017 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-21 16:13:13,017 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-21 16:13:13,017 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-21 16:13:13,017 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-21 16:13:13,017 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-21 16:13:13,017 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-21 16:13:13,017 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-12-21 16:13:13,018 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-12-21 16:13:13,018 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-21 16:13:13,018 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-21 16:13:13,018 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-21 16:13:13,018 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-21 16:13:13,018 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-21 16:13:13,018 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-21 16:13:13,018 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-21 16:13:13,019 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 16:13:13,019 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-21 16:13:13,019 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-21 16:13:13,019 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-21 16:13:13,019 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2021-12-21 16:13:13,019 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2021-12-21 16:13:13,019 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2021-12-21 16:13:13,019 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2021-12-21 16:13:13,019 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-21 16:13:13,020 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-21 16:13:13,020 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-21 16:13:13,020 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-21 16:13:13,020 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 16:13:13,020 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-21 16:13:13,020 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-21 16:13:13,020 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-21 16:13:13,020 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 16:13:13,021 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 16:13:13,280 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 16:13:13,282 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 16:13:13,370 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-21 16:13:15,323 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 16:13:15,331 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 16:13:15,331 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-21 16:13:15,333 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 04:13:15 BoogieIcfgContainer [2021-12-21 16:13:15,333 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 16:13:15,334 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 16:13:15,334 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 16:13:15,336 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 16:13:15,336 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 04:13:11" (1/3) ... [2021-12-21 16:13:15,337 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@16c2ef4e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 04:13:15, skipping insertion in model container [2021-12-21 16:13:15,337 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:12" (2/3) ... [2021-12-21 16:13:15,337 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@16c2ef4e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 04:13:15, skipping insertion in model container [2021-12-21 16:13:15,337 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 04:13:15" (3/3) ... [2021-12-21 16:13:15,339 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2021-12-21 16:13:15,348 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 16:13:15,348 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 16:13:15,387 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 16:13:15,393 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 16:13:15,393 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 16:13:15,408 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) [2021-12-21 16:13:15,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-12-21 16:13:15,416 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:15,416 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:15,417 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:15,421 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:15,421 INFO L85 PathProgramCache]: Analyzing trace with hash 721078938, now seen corresponding path program 1 times [2021-12-21 16:13:15,427 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:15,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [361096686] [2021-12-21 16:13:15,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:15,428 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:15,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:15,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:15,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:15,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:15,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:15,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:15,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:15,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 16:13:15,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:15,891 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-21 16:13:15,892 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:15,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [361096686] [2021-12-21 16:13:15,893 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [361096686] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:15,893 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 16:13:15,893 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 16:13:15,894 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995697080] [2021-12-21 16:13:15,894 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:15,898 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 16:13:15,898 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:15,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 16:13:15,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 16:13:15,926 INFO L87 Difference]: Start difference. First operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 16:13:18,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:18,092 INFO L93 Difference]: Finished difference Result 786 states and 1178 transitions. [2021-12-21 16:13:18,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 16:13:18,095 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 42 [2021-12-21 16:13:18,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:18,105 INFO L225 Difference]: With dead ends: 786 [2021-12-21 16:13:18,105 INFO L226 Difference]: Without dead ends: 536 [2021-12-21 16:13:18,109 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-21 16:13:18,112 INFO L933 BasicCegarLoop]: 346 mSDtfsCounter, 580 mSDsluCounter, 647 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 221 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 993 SdHoareTripleChecker+Invalid, 572 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 221 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:18,112 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [607 Valid, 993 Invalid, 572 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [221 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2021-12-21 16:13:18,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2021-12-21 16:13:18,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 419. [2021-12-21 16:13:18,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 419 states, 339 states have (on average 1.3746312684365782) internal successors, (466), 339 states have internal predecessors, (466), 56 states have call successors, (56), 24 states have call predecessors, (56), 23 states have return successors, (55), 55 states have call predecessors, (55), 55 states have call successors, (55) [2021-12-21 16:13:18,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 577 transitions. [2021-12-21 16:13:18,212 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 577 transitions. Word has length 42 [2021-12-21 16:13:18,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:18,213 INFO L470 AbstractCegarLoop]: Abstraction has 419 states and 577 transitions. [2021-12-21 16:13:18,213 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 16:13:18,214 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 577 transitions. [2021-12-21 16:13:18,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-21 16:13:18,223 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:18,224 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:18,224 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 16:13:18,224 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:18,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:18,226 INFO L85 PathProgramCache]: Analyzing trace with hash -36377006, now seen corresponding path program 1 times [2021-12-21 16:13:18,226 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:18,227 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [895400198] [2021-12-21 16:13:18,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:18,231 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:18,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:18,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:18,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:18,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:18,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:18,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:18,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:18,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 16:13:18,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:18,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-21 16:13:18,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:18,406 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-21 16:13:18,407 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:18,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [895400198] [2021-12-21 16:13:18,407 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [895400198] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:18,407 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 16:13:18,407 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 16:13:18,408 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [900015491] [2021-12-21 16:13:18,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:18,409 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 16:13:18,409 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:18,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 16:13:18,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 16:13:18,410 INFO L87 Difference]: Start difference. First operand 419 states and 577 transitions. Second operand has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 16:13:20,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:20,116 INFO L93 Difference]: Finished difference Result 1453 states and 2078 transitions. [2021-12-21 16:13:20,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 16:13:20,117 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 52 [2021-12-21 16:13:20,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:20,137 INFO L225 Difference]: With dead ends: 1453 [2021-12-21 16:13:20,137 INFO L226 Difference]: Without dead ends: 1044 [2021-12-21 16:13:20,139 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2021-12-21 16:13:20,140 INFO L933 BasicCegarLoop]: 331 mSDtfsCounter, 606 mSDsluCounter, 1278 mSDsCounter, 0 mSdLazyCounter, 504 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 633 SdHoareTripleChecker+Valid, 1609 SdHoareTripleChecker+Invalid, 703 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 504 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:20,140 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [633 Valid, 1609 Invalid, 703 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 504 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2021-12-21 16:13:20,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1044 states. [2021-12-21 16:13:20,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1044 to 871. [2021-12-21 16:13:20,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 871 states, 706 states have (on average 1.3767705382436262) internal successors, (972), 710 states have internal predecessors, (972), 113 states have call successors, (113), 46 states have call predecessors, (113), 51 states have return successors, (131), 114 states have call predecessors, (131), 112 states have call successors, (131) [2021-12-21 16:13:20,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 871 states to 871 states and 1216 transitions. [2021-12-21 16:13:20,195 INFO L78 Accepts]: Start accepts. Automaton has 871 states and 1216 transitions. Word has length 52 [2021-12-21 16:13:20,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:20,195 INFO L470 AbstractCegarLoop]: Abstraction has 871 states and 1216 transitions. [2021-12-21 16:13:20,195 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 16:13:20,195 INFO L276 IsEmpty]: Start isEmpty. Operand 871 states and 1216 transitions. [2021-12-21 16:13:20,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2021-12-21 16:13:20,200 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:20,200 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:20,200 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 16:13:20,201 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:20,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:20,201 INFO L85 PathProgramCache]: Analyzing trace with hash 1655869192, now seen corresponding path program 1 times [2021-12-21 16:13:20,201 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:20,201 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022303031] [2021-12-21 16:13:20,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:20,202 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:20,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:20,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:20,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:20,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 16:13:20,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-21 16:13:20,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:20,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:20,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 16:13:20,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:20,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-21 16:13:20,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:20,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 16:13:20,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:20,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-21 16:13:20,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,493 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 8 proven. 2 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2021-12-21 16:13:20,494 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:20,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022303031] [2021-12-21 16:13:20,494 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022303031] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 16:13:20,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [753000314] [2021-12-21 16:13:20,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:20,494 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 16:13:20,495 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 16:13:20,496 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 16:13:20,526 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 16:13:20,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:20,808 INFO L263 TraceCheckSpWp]: Trace formula consists of 1311 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-21 16:13:20,815 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 16:13:21,062 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-12-21 16:13:21,063 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 16:13:21,063 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [753000314] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:21,063 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 16:13:21,063 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 11 [2021-12-21 16:13:21,063 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1756639956] [2021-12-21 16:13:21,063 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:21,064 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 16:13:21,064 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:21,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 16:13:21,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2021-12-21 16:13:21,066 INFO L87 Difference]: Start difference. First operand 871 states and 1216 transitions. Second operand has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-21 16:13:21,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:21,124 INFO L93 Difference]: Finished difference Result 2006 states and 2833 transitions. [2021-12-21 16:13:21,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 16:13:21,125 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 126 [2021-12-21 16:13:21,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:21,130 INFO L225 Difference]: With dead ends: 2006 [2021-12-21 16:13:21,130 INFO L226 Difference]: Without dead ends: 1151 [2021-12-21 16:13:21,132 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 161 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2021-12-21 16:13:21,146 INFO L933 BasicCegarLoop]: 320 mSDtfsCounter, 125 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:21,152 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 591 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 16:13:21,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1151 states. [2021-12-21 16:13:21,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1151 to 1140. [2021-12-21 16:13:21,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1140 states, 952 states have (on average 1.4002100840336134) internal successors, (1333), 956 states have internal predecessors, (1333), 126 states have call successors, (126), 56 states have call predecessors, (126), 61 states have return successors, (144), 127 states have call predecessors, (144), 125 states have call successors, (144) [2021-12-21 16:13:21,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1140 states to 1140 states and 1603 transitions. [2021-12-21 16:13:21,199 INFO L78 Accepts]: Start accepts. Automaton has 1140 states and 1603 transitions. Word has length 126 [2021-12-21 16:13:21,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:21,201 INFO L470 AbstractCegarLoop]: Abstraction has 1140 states and 1603 transitions. [2021-12-21 16:13:21,201 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-21 16:13:21,202 INFO L276 IsEmpty]: Start isEmpty. Operand 1140 states and 1603 transitions. [2021-12-21 16:13:21,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-12-21 16:13:21,207 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:21,207 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:21,242 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 16:13:21,426 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 16:13:21,426 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:21,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:21,427 INFO L85 PathProgramCache]: Analyzing trace with hash -474001616, now seen corresponding path program 1 times [2021-12-21 16:13:21,427 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:21,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809911874] [2021-12-21 16:13:21,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:21,427 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:21,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:21,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:21,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:21,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 16:13:21,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-21 16:13:21,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 16:13:21,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 16:13:21,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-21 16:13:21,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:21,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:21,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 16:13:21,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:21,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-21 16:13:21,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:21,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 16:13:21,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:21,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:21,692 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-12-21 16:13:21,692 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:21,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809911874] [2021-12-21 16:13:21,693 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809911874] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:21,693 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 16:13:21,693 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 16:13:21,693 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [155023892] [2021-12-21 16:13:21,693 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:21,694 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 16:13:21,694 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:21,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 16:13:21,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 16:13:21,695 INFO L87 Difference]: Start difference. First operand 1140 states and 1603 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-21 16:13:25,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:25,369 INFO L93 Difference]: Finished difference Result 3449 states and 4896 transitions. [2021-12-21 16:13:25,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 16:13:25,370 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 148 [2021-12-21 16:13:25,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:25,378 INFO L225 Difference]: With dead ends: 3449 [2021-12-21 16:13:25,379 INFO L226 Difference]: Without dead ends: 2336 [2021-12-21 16:13:25,382 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 16:13:25,383 INFO L933 BasicCegarLoop]: 445 mSDtfsCounter, 664 mSDsluCounter, 1087 mSDsCounter, 0 mSdLazyCounter, 519 mSolverCounterSat, 271 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 693 SdHoareTripleChecker+Valid, 1532 SdHoareTripleChecker+Invalid, 790 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 271 IncrementalHoareTripleChecker+Valid, 519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:25,383 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [693 Valid, 1532 Invalid, 790 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [271 Valid, 519 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2021-12-21 16:13:25,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2336 states. [2021-12-21 16:13:25,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2336 to 1902. [2021-12-21 16:13:25,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1902 states, 1588 states have (on average 1.3860201511335013) internal successors, (2201), 1596 states have internal predecessors, (2201), 206 states have call successors, (206), 96 states have call predecessors, (206), 107 states have return successors, (233), 209 states have call predecessors, (233), 205 states have call successors, (233) [2021-12-21 16:13:25,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1902 states to 1902 states and 2640 transitions. [2021-12-21 16:13:25,444 INFO L78 Accepts]: Start accepts. Automaton has 1902 states and 2640 transitions. Word has length 148 [2021-12-21 16:13:25,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:25,444 INFO L470 AbstractCegarLoop]: Abstraction has 1902 states and 2640 transitions. [2021-12-21 16:13:25,444 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-21 16:13:25,444 INFO L276 IsEmpty]: Start isEmpty. Operand 1902 states and 2640 transitions. [2021-12-21 16:13:25,447 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-12-21 16:13:25,447 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:25,447 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:25,447 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 16:13:25,448 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:25,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:25,448 INFO L85 PathProgramCache]: Analyzing trace with hash -676998162, now seen corresponding path program 1 times [2021-12-21 16:13:25,448 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:25,448 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [657388637] [2021-12-21 16:13:25,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:25,449 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:25,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:25,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:25,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:25,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 16:13:25,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-21 16:13:25,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 16:13:25,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 16:13:25,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-21 16:13:25,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:25,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:25,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 16:13:25,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:25,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-21 16:13:25,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:25,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 16:13:25,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:25,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:25,761 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-12-21 16:13:25,762 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:25,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [657388637] [2021-12-21 16:13:25,762 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [657388637] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:25,762 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 16:13:25,762 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-21 16:13:25,764 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2109975314] [2021-12-21 16:13:25,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:25,765 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-21 16:13:25,765 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:25,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-21 16:13:25,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2021-12-21 16:13:25,766 INFO L87 Difference]: Start difference. First operand 1902 states and 2640 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-21 16:13:28,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:28,909 INFO L93 Difference]: Finished difference Result 4158 states and 5877 transitions. [2021-12-21 16:13:28,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 16:13:28,909 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) Word has length 148 [2021-12-21 16:13:28,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:28,920 INFO L225 Difference]: With dead ends: 4158 [2021-12-21 16:13:28,920 INFO L226 Difference]: Without dead ends: 2283 [2021-12-21 16:13:28,925 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-21 16:13:28,927 INFO L933 BasicCegarLoop]: 306 mSDtfsCounter, 110 mSDsluCounter, 1470 mSDsCounter, 0 mSdLazyCounter, 642 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 1776 SdHoareTripleChecker+Invalid, 702 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 642 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:28,928 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [121 Valid, 1776 Invalid, 702 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 642 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2021-12-21 16:13:28,931 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2283 states. [2021-12-21 16:13:29,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2283 to 1902. [2021-12-21 16:13:29,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1902 states, 1580 states have (on average 1.3778481012658228) internal successors, (2177), 1592 states have internal predecessors, (2177), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (249), 213 states have call predecessors, (249), 205 states have call successors, (249) [2021-12-21 16:13:29,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1902 states to 1902 states and 2632 transitions. [2021-12-21 16:13:29,018 INFO L78 Accepts]: Start accepts. Automaton has 1902 states and 2632 transitions. Word has length 148 [2021-12-21 16:13:29,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:29,019 INFO L470 AbstractCegarLoop]: Abstraction has 1902 states and 2632 transitions. [2021-12-21 16:13:29,020 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2021-12-21 16:13:29,020 INFO L276 IsEmpty]: Start isEmpty. Operand 1902 states and 2632 transitions. [2021-12-21 16:13:29,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 156 [2021-12-21 16:13:29,024 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:29,025 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:29,025 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 16:13:29,025 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:29,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:29,026 INFO L85 PathProgramCache]: Analyzing trace with hash -293871194, now seen corresponding path program 1 times [2021-12-21 16:13:29,026 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:29,026 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247943261] [2021-12-21 16:13:29,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:29,027 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:29,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:29,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:29,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:29,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 16:13:29,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-21 16:13:29,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 16:13:29,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 16:13:29,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-21 16:13:29,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:29,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:29,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 16:13:29,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:29,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:29,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-21 16:13:29,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:29,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-21 16:13:29,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:29,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:29,413 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-12-21 16:13:29,413 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:29,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [247943261] [2021-12-21 16:13:29,414 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [247943261] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:29,414 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 16:13:29,414 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2021-12-21 16:13:29,414 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [551915583] [2021-12-21 16:13:29,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:29,415 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-21 16:13:29,415 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:29,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-21 16:13:29,416 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2021-12-21 16:13:29,416 INFO L87 Difference]: Start difference. First operand 1902 states and 2632 transitions. Second operand has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) [2021-12-21 16:13:31,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:31,656 INFO L93 Difference]: Finished difference Result 4398 states and 6221 transitions. [2021-12-21 16:13:31,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 16:13:31,657 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) Word has length 155 [2021-12-21 16:13:31,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:31,664 INFO L225 Difference]: With dead ends: 4398 [2021-12-21 16:13:31,664 INFO L226 Difference]: Without dead ends: 2523 [2021-12-21 16:13:31,668 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=229, Unknown=0, NotChecked=0, Total=272 [2021-12-21 16:13:31,668 INFO L933 BasicCegarLoop]: 354 mSDtfsCounter, 262 mSDsluCounter, 2816 mSDsCounter, 0 mSdLazyCounter, 989 mSolverCounterSat, 139 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 281 SdHoareTripleChecker+Valid, 3170 SdHoareTripleChecker+Invalid, 1128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 139 IncrementalHoareTripleChecker+Valid, 989 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:31,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [281 Valid, 3170 Invalid, 1128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [139 Valid, 989 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2021-12-21 16:13:31,670 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2523 states. [2021-12-21 16:13:31,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2523 to 1918. [2021-12-21 16:13:31,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1918 states, 1596 states have (on average 1.369047619047619) internal successors, (2185), 1600 states have internal predecessors, (2185), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2021-12-21 16:13:31,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1918 states to 1918 states and 2636 transitions. [2021-12-21 16:13:31,724 INFO L78 Accepts]: Start accepts. Automaton has 1918 states and 2636 transitions. Word has length 155 [2021-12-21 16:13:31,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:31,725 INFO L470 AbstractCegarLoop]: Abstraction has 1918 states and 2636 transitions. [2021-12-21 16:13:31,725 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) [2021-12-21 16:13:31,725 INFO L276 IsEmpty]: Start isEmpty. Operand 1918 states and 2636 transitions. [2021-12-21 16:13:31,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2021-12-21 16:13:31,728 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:31,728 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:31,728 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 16:13:31,728 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:31,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:31,729 INFO L85 PathProgramCache]: Analyzing trace with hash -1223252563, now seen corresponding path program 1 times [2021-12-21 16:13:31,729 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:31,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648176393] [2021-12-21 16:13:31,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:31,729 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:31,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:31,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:31,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:31,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 16:13:31,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-21 16:13:31,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 16:13:31,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 16:13:31,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-21 16:13:31,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:31,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:31,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 16:13:31,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:31,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:31,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 16:13:31,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 16:13:31,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:31,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-21 16:13:31,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:31,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:31,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:32,000 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2021-12-21 16:13:32,000 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:32,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1648176393] [2021-12-21 16:13:32,000 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1648176393] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 16:13:32,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1712991111] [2021-12-21 16:13:32,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:32,001 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 16:13:32,001 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 16:13:32,002 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 16:13:32,003 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 16:13:32,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:32,321 INFO L263 TraceCheckSpWp]: Trace formula consists of 1501 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-21 16:13:32,325 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 16:13:32,583 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 79 trivial. 0 not checked. [2021-12-21 16:13:32,583 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 16:13:32,583 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1712991111] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:32,583 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 16:13:32,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 9 [2021-12-21 16:13:32,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [566646206] [2021-12-21 16:13:32,584 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:32,584 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-21 16:13:32,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:32,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 16:13:32,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-12-21 16:13:32,585 INFO L87 Difference]: Start difference. First operand 1918 states and 2636 transitions. Second operand has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-21 16:13:32,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:32,630 INFO L93 Difference]: Finished difference Result 3819 states and 5254 transitions. [2021-12-21 16:13:32,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-21 16:13:32,631 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2021-12-21 16:13:32,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:32,640 INFO L225 Difference]: With dead ends: 3819 [2021-12-21 16:13:32,640 INFO L226 Difference]: Without dead ends: 1919 [2021-12-21 16:13:32,643 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 191 SyntacticMatches, 1 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-21 16:13:32,643 INFO L933 BasicCegarLoop]: 310 mSDtfsCounter, 2 mSDsluCounter, 617 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 927 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:32,643 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 927 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 16:13:32,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1919 states. [2021-12-21 16:13:32,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1919 to 1919. [2021-12-21 16:13:32,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1919 states, 1597 states have (on average 1.3688165309956168) internal successors, (2186), 1601 states have internal predecessors, (2186), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2021-12-21 16:13:32,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1919 states to 1919 states and 2637 transitions. [2021-12-21 16:13:32,690 INFO L78 Accepts]: Start accepts. Automaton has 1919 states and 2637 transitions. Word has length 161 [2021-12-21 16:13:32,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:32,690 INFO L470 AbstractCegarLoop]: Abstraction has 1919 states and 2637 transitions. [2021-12-21 16:13:32,691 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-21 16:13:32,691 INFO L276 IsEmpty]: Start isEmpty. Operand 1919 states and 2637 transitions. [2021-12-21 16:13:32,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2021-12-21 16:13:32,693 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:32,693 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:32,714 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 16:13:32,915 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2021-12-21 16:13:32,915 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:32,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:32,916 INFO L85 PathProgramCache]: Analyzing trace with hash -1686704921, now seen corresponding path program 1 times [2021-12-21 16:13:32,916 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:32,916 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653851893] [2021-12-21 16:13:32,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:32,916 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:33,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:33,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:33,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:33,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 16:13:33,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-21 16:13:33,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-21 16:13:33,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-21 16:13:33,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-21 16:13:33,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:33,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:33,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 16:13:33,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:33,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:33,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 16:13:33,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 16:13:33,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:33,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-21 16:13:33,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:33,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,258 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2021-12-21 16:13:33,259 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:33,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653851893] [2021-12-21 16:13:33,259 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653851893] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 16:13:33,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1102699237] [2021-12-21 16:13:33,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:33,259 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 16:13:33,259 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 16:13:33,276 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 16:13:33,316 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 16:13:33,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:33,766 INFO L263 TraceCheckSpWp]: Trace formula consists of 1531 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-21 16:13:33,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 16:13:34,095 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 39 proven. 1 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2021-12-21 16:13:34,096 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 16:13:34,453 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2021-12-21 16:13:34,453 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1102699237] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 16:13:34,454 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 16:13:34,454 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2021-12-21 16:13:34,454 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1453807762] [2021-12-21 16:13:34,454 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 16:13:34,454 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-21 16:13:34,454 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:34,455 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-21 16:13:34,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2021-12-21 16:13:34,455 INFO L87 Difference]: Start difference. First operand 1919 states and 2637 transitions. Second operand has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2021-12-21 16:13:35,678 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-21 16:13:36,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:36,971 INFO L93 Difference]: Finished difference Result 4187 states and 5818 transitions. [2021-12-21 16:13:36,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-21 16:13:36,972 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) Word has length 163 [2021-12-21 16:13:36,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:36,980 INFO L225 Difference]: With dead ends: 4187 [2021-12-21 16:13:36,980 INFO L226 Difference]: Without dead ends: 2284 [2021-12-21 16:13:36,984 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 351 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2021-12-21 16:13:36,984 INFO L933 BasicCegarLoop]: 304 mSDtfsCounter, 274 mSDsluCounter, 1140 mSDsCounter, 0 mSdLazyCounter, 462 mSolverCounterSat, 179 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 1444 SdHoareTripleChecker+Invalid, 641 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 179 IncrementalHoareTripleChecker+Valid, 462 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:36,985 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [285 Valid, 1444 Invalid, 641 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [179 Valid, 462 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2021-12-21 16:13:36,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2284 states. [2021-12-21 16:13:37,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2284 to 1922. [2021-12-21 16:13:37,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1922 states, 1600 states have (on average 1.368125) internal successors, (2189), 1604 states have internal predecessors, (2189), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2021-12-21 16:13:37,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1922 states to 1922 states and 2640 transitions. [2021-12-21 16:13:37,047 INFO L78 Accepts]: Start accepts. Automaton has 1922 states and 2640 transitions. Word has length 163 [2021-12-21 16:13:37,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:37,048 INFO L470 AbstractCegarLoop]: Abstraction has 1922 states and 2640 transitions. [2021-12-21 16:13:37,048 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2021-12-21 16:13:37,048 INFO L276 IsEmpty]: Start isEmpty. Operand 1922 states and 2640 transitions. [2021-12-21 16:13:37,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2021-12-21 16:13:37,052 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:37,052 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:37,094 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-21 16:13:37,298 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 16:13:37,299 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:37,299 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:37,299 INFO L85 PathProgramCache]: Analyzing trace with hash 699141421, now seen corresponding path program 2 times [2021-12-21 16:13:37,300 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:37,300 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [359886552] [2021-12-21 16:13:37,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:37,300 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:37,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 16:13:37,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 16:13:37,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 16:13:37,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2021-12-21 16:13:37,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-21 16:13:37,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-21 16:13:37,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-21 16:13:37,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-21 16:13:37,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:37,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:37,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 16:13:37,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:37,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 16:13:37,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 16:13:37,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 16:13:37,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:37,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-21 16:13:37,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 16:13:37,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 16:13:37,932 INFO L134 CoverageAnalysis]: Checked inductivity of 159 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 140 trivial. 0 not checked. [2021-12-21 16:13:37,932 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 16:13:37,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [359886552] [2021-12-21 16:13:37,932 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [359886552] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 16:13:37,932 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 16:13:37,932 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2021-12-21 16:13:37,932 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501121188] [2021-12-21 16:13:37,933 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 16:13:37,933 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-12-21 16:13:37,933 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 16:13:37,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-12-21 16:13:37,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2021-12-21 16:13:37,934 INFO L87 Difference]: Start difference. First operand 1922 states and 2640 transitions. Second operand has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) [2021-12-21 16:13:40,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 16:13:40,631 INFO L93 Difference]: Finished difference Result 4519 states and 6356 transitions. [2021-12-21 16:13:40,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-21 16:13:40,632 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) Word has length 169 [2021-12-21 16:13:40,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 16:13:40,642 INFO L225 Difference]: With dead ends: 4519 [2021-12-21 16:13:40,642 INFO L226 Difference]: Without dead ends: 2628 [2021-12-21 16:13:40,646 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 82 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=97, Invalid=715, Unknown=0, NotChecked=0, Total=812 [2021-12-21 16:13:40,647 INFO L933 BasicCegarLoop]: 363 mSDtfsCounter, 362 mSDsluCounter, 4085 mSDsCounter, 0 mSdLazyCounter, 1521 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 376 SdHoareTripleChecker+Valid, 4448 SdHoareTripleChecker+Invalid, 1720 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 1521 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2021-12-21 16:13:40,647 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [376 Valid, 4448 Invalid, 1720 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 1521 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2021-12-21 16:13:40,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2628 states. [2021-12-21 16:13:40,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2628 to 1962. [2021-12-21 16:13:40,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1962 states, 1632 states have (on average 1.360906862745098) internal successors, (2221), 1636 states have internal predecessors, (2221), 214 states have call successors, (214), 96 states have call predecessors, (214), 115 states have return successors, (253), 229 states have call predecessors, (253), 213 states have call successors, (253) [2021-12-21 16:13:40,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1962 states to 1962 states and 2688 transitions. [2021-12-21 16:13:40,726 INFO L78 Accepts]: Start accepts. Automaton has 1962 states and 2688 transitions. Word has length 169 [2021-12-21 16:13:40,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 16:13:40,726 INFO L470 AbstractCegarLoop]: Abstraction has 1962 states and 2688 transitions. [2021-12-21 16:13:40,726 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) [2021-12-21 16:13:40,727 INFO L276 IsEmpty]: Start isEmpty. Operand 1962 states and 2688 transitions. [2021-12-21 16:13:40,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2021-12-21 16:13:40,751 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 16:13:40,751 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:40,751 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 16:13:40,751 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 16:13:40,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 16:13:40,752 INFO L85 PathProgramCache]: Analyzing trace with hash 2025494723, now seen corresponding path program 1 times [2021-12-21 16:13:40,752 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 16:13:40,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1067147176] [2021-12-21 16:13:40,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 16:13:40,752 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 16:13:40,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 16:13:40,854 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 16:13:40,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 16:13:41,023 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 16:13:41,023 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-21 16:13:41,024 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 16:13:41,026 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-21 16:13:41,028 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 16:13:41,031 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 16:13:41,062 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-21 16:13:41,065 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-21 16:13:41,075 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,075 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,076 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,076 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,076 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,076 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,076 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,077 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,077 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,077 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-12-21 16:13:41,079 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,079 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,080 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,080 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,080 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,080 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,080 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,080 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,081 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,081 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,081 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,081 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,081 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,081 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,081 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,082 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,082 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,082 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,082 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,082 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,082 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,082 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,083 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,084 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,085 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,085 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,086 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,086 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,086 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,086 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,086 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,086 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,086 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,087 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,087 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,087 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,087 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,088 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,088 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,088 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,088 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,089 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,089 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,089 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,089 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,089 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,090 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,090 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,090 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,090 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,090 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,090 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,091 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,091 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,091 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,091 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,091 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,091 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,091 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,092 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,092 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2021-12-21 16:13:41,092 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,092 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,092 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2021-12-21 16:13:41,092 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2021-12-21 16:13:41,224 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 04:13:41 BoogieIcfgContainer [2021-12-21 16:13:41,225 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 16:13:41,225 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 16:13:41,225 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 16:13:41,225 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 16:13:41,226 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 04:13:15" (3/4) ... [2021-12-21 16:13:41,228 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-21 16:13:41,228 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 16:13:41,228 INFO L158 Benchmark]: Toolchain (without parser) took 29355.89ms. Allocated memory was 90.2MB in the beginning and 287.3MB in the end (delta: 197.1MB). Free memory was 51.9MB in the beginning and 67.7MB in the end (delta: -15.7MB). Peak memory consumption was 179.7MB. Max. memory is 16.1GB. [2021-12-21 16:13:41,229 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 90.2MB. Free memory was 46.8MB in the beginning and 46.7MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 16:13:41,229 INFO L158 Benchmark]: CACSL2BoogieTranslator took 869.13ms. Allocated memory was 90.2MB in the beginning and 111.1MB in the end (delta: 21.0MB). Free memory was 51.7MB in the beginning and 57.5MB in the end (delta: -5.7MB). Peak memory consumption was 34.2MB. Max. memory is 16.1GB. [2021-12-21 16:13:41,229 INFO L158 Benchmark]: Boogie Procedure Inliner took 93.36ms. Allocated memory is still 111.1MB. Free memory was 57.5MB in the beginning and 50.7MB in the end (delta: 6.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 16:13:41,230 INFO L158 Benchmark]: Boogie Preprocessor took 101.17ms. Allocated memory is still 111.1MB. Free memory was 50.7MB in the beginning and 44.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 16:13:41,230 INFO L158 Benchmark]: RCFGBuilder took 2393.68ms. Allocated memory was 111.1MB in the beginning and 199.2MB in the end (delta: 88.1MB). Free memory was 44.4MB in the beginning and 141.2MB in the end (delta: -96.8MB). Peak memory consumption was 87.3MB. Max. memory is 16.1GB. [2021-12-21 16:13:41,230 INFO L158 Benchmark]: TraceAbstraction took 25890.64ms. Allocated memory was 199.2MB in the beginning and 287.3MB in the end (delta: 88.1MB). Free memory was 141.2MB in the beginning and 68.6MB in the end (delta: 72.7MB). Peak memory consumption was 161.0MB. Max. memory is 16.1GB. [2021-12-21 16:13:41,231 INFO L158 Benchmark]: Witness Printer took 2.99ms. Allocated memory is still 287.3MB. Free memory was 68.6MB in the beginning and 67.7MB in the end (delta: 899.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 16:13:41,232 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 90.2MB. Free memory was 46.8MB in the beginning and 46.7MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 869.13ms. Allocated memory was 90.2MB in the beginning and 111.1MB in the end (delta: 21.0MB). Free memory was 51.7MB in the beginning and 57.5MB in the end (delta: -5.7MB). Peak memory consumption was 34.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 93.36ms. Allocated memory is still 111.1MB. Free memory was 57.5MB in the beginning and 50.7MB in the end (delta: 6.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 101.17ms. Allocated memory is still 111.1MB. Free memory was 50.7MB in the beginning and 44.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * RCFGBuilder took 2393.68ms. Allocated memory was 111.1MB in the beginning and 199.2MB in the end (delta: 88.1MB). Free memory was 44.4MB in the beginning and 141.2MB in the end (delta: -96.8MB). Peak memory consumption was 87.3MB. Max. memory is 16.1GB. * TraceAbstraction took 25890.64ms. Allocated memory was 199.2MB in the beginning and 287.3MB in the end (delta: 88.1MB). Free memory was 141.2MB in the beginning and 68.6MB in the end (delta: 72.7MB). Peak memory consumption was 161.0MB. Max. memory is 16.1GB. * Witness Printer took 2.99ms. Allocated memory is still 287.3MB. Free memory was 68.6MB in the beginning and 67.7MB in the end (delta: 899.1kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 5639]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5861. Possible FailurePath: [L5662] int LDV_IN_INTERRUPT = 1; [L5663] int ldv_state_variable_2 ; [L5664] struct usbnet *genelink_info_group0 ; [L5665] int ref_cnt ; [L5666] int ldv_state_variable_1 ; [L5667] int usb_counter ; [L5668] struct usb_interface *gl620a_driver_group1 ; [L5669] int ldv_state_variable_0 ; [L5670] struct sk_buff *genelink_info_group1 ; [L5860-L5862] static struct driver_info const genelink_info = {(char *)"Genesys GeneLink", 4114, & genelink_bind, 0, 0, 0, 0, 0, 0, 0, & genelink_rx_fixup, & genelink_tx_fixup, 0, 0, 1, 2, 0UL}; [L5863-L5865] static struct usb_device_id const products[2U] = { {3U, 1507U, 1282U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned long )(& genelink_info)}}; [L5866] struct usb_device_id const __mod_usb__products_device_table ; [L5867-L5876] static struct usb_driver gl620a_driver = {"gl620a", & usbnet_probe, & usbnet_disconnect, 0, & usbnet_suspend, & usbnet_resume, 0, 0, 0, (struct usb_device_id const *)(& products), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L5893] int ldv_retval_2 ; [L5894] int ldv_retval_5 ; [L5895] int ldv_retval_0 ; [L5896] int ldv_retval_4 ; [L5899] int ldv_retval_1 ; [L5901] int ldv_retval_3 ; [L6187] Element set_impl[15] ; [L6188] int last_index = 0; [L6322] Set LDV_SKBS ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5925] struct usb_device_id *ldvarg1 ; [L5926] void *tmp ; [L5927] pm_message_t ldvarg0 ; [L5928] struct usb_interface *ldvarg3 ; [L5929] void *tmp___0 ; [L5930] gfp_t ldvarg2 ; [L5931] int tmp___1 ; [L5932] int tmp___2 ; [L5933] int tmp___3 ; [L5934] int tmp___4 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=32, tmp___0=1, usb_counter=0] [L5936] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] tmp = ldv_zalloc(32UL) [L5937] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5938] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] tmp___0 = ldv_zalloc(1560UL) [L5939] ldvarg3 = (struct usb_interface *)tmp___0 [L5940] CALL ldv_initialize() [L6341] CALL ldv_set_init(LDV_SKBS) [L6193] set = set_impl [L6194] last_index = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set={0:0}, set={24:0}, set_impl={24:0}, usb_counter=0] [L6341] RET ldv_set_init(LDV_SKBS) [L5940] RET ldv_initialize() [L5941] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5942] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5943] ldv_state_variable_1 = 0 [L5944] ref_cnt = 0 [L5945] ldv_state_variable_0 = 1 [L5946] ldv_state_variable_2 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: [L6028] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L6029] COND TRUE ldv_state_variable_0 == 1 [L6030] CALL, EXPR gl620a_driver_init() [L5879] int tmp ; [L5881] CALL, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L6167] ldv_func_ret_type ldv_func_res ; [L6168] int tmp ; [L6170] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6436] return __VERIFIER_nondet_int(); [L6170] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6170] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6171] ldv_func_res = tmp [L6172] ldv_state_variable_1 = 1 [L6173] usb_counter = 0 [L6174] CALL ldv_usb_driver_1() [L5916] void *tmp ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5918] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] tmp = ldv_zalloc(1560UL) [L5919] gl620a_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L6174] RET ldv_usb_driver_1() [L6175] return (ldv_func_res); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, ldv_func_arg1={23:0}, ldv_func_arg1={23:0}, ldv_func_arg2={4294967334:4294967332}, ldv_func_arg2={4294967334:4294967332}, ldv_func_arg3={20:0}, ldv_func_arg3={20:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L5881] RET, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5881] tmp = ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5882] return (tmp); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L6030] RET, EXPR gl620a_driver_init() [L6030] ldv_retval_4 = gl620a_driver_init() [L6031] COND TRUE ldv_retval_4 == 0 [L6032] ldv_state_variable_0 = 3 [L6033] ldv_state_variable_2 = 1 [L6034] CALL ldv_initialize_driver_info_2() [L5904] void *tmp ; [L5905] void *tmp___0 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] CALL, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1472, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1472, tmp___0=1, usb_counter=0] [L5907] RET, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(1472UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] tmp = ldv_zalloc(1472UL) [L5908] genelink_info_group0 = (struct usbnet *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=232, tmp___0=1, usb_counter=0] [L5909] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] tmp___0 = ldv_zalloc(232UL) [L5910] genelink_info_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L6034] RET ldv_initialize_driver_info_2() [L6037] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: [L6052] case 2: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, usb_counter=0] [L6053] COND TRUE ldv_state_variable_2 != 0 [L6054] tmp___4 = __VERIFIER_nondet_int() [L6056] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6057] COND TRUE ldv_state_variable_2 == 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6058] CALL genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5700] struct gl_header *header ; [L5701] struct gl_packet *packet ; [L5702] struct sk_buff *gl_skb ; [L5703] u32 size ; [L5704] u32 count ; [L5705] struct _ddebug descriptor ; [L5706] long tmp ; [L5707] struct _ddebug descriptor___0 ; [L5708] long tmp___0 ; [L5709] size_t __len ; [L5710] void *__ret ; [L5711] unsigned char *tmp___2 ; [L5712] struct _ddebug descriptor___1 ; [L5713] long tmp___3 ; [L5715] EXPR skb->len [L5715] EXPR dev->net [L5715] EXPR (dev->net)->hard_header_len VAL [(dev->net)->hard_header_len=0, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, dev->net={4294967335:-2}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb->len=0, usb_counter=0] [L5715] COND FALSE !(skb->len < (unsigned int )(dev->net)->hard_header_len) [L5719] EXPR skb->data [L5719] header = (struct gl_header *)skb->data [L5720] EXPR header->packet_count [L5720] count = header->packet_count [L5721] COND FALSE !(count > 32U) [L5737] packet = & header->packets VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5738] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-3, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5738] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, usb_counter=0] [L5771] COND TRUE count > 1U VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5741] EXPR packet->packet_length [L5741] size = packet->packet_length [L5742] COND FALSE !(size > 1514U) [L5758] CALL, EXPR ldv_alloc_skb_12(size, 32U) [L6153] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6325] void *skb ; [L6326] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND FALSE !(tmp___0 != 0) [L5612] EXPR, FCALL calloc(1UL, size) [L5612] tmp = calloc(1UL, size) [L5613] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551615:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L5614] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5583] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, cond=1, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5614] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551615:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L5615] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551615:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551615:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L6328] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551615:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6329] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, usb_counter=0] [L6330] COND FALSE !(! skb) [L6333] CALL ldv_set_add(LDV_SKBS, skb) [L6201] int i ; [L6203] i = 0 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6204] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6205] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6215] COND TRUE last_index < 15 [L6216] set_impl[last_index] = e [L6217] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6333] RET ldv_set_add(LDV_SKBS, skb) [L6334] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551615:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, usb_counter=0] [L6155] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_skb_alloc()={-18446744073709551615:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] tmp = ldv_skb_alloc() [L6156] COND TRUE \read(*tmp) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551615:0}, usb_counter=0] [L6158] CALL, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp___0=-5, usb_counter=0] [L6158] RET, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(size)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551615:0}, usb_counter=0] [L6158] tmp->head = ldv_malloc(size) [L6159] EXPR tmp->head [L6159] tmp->data = tmp->head [L6161] return (tmp); VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, \result={-18446744073709551615:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551615:0}, usb_counter=0] [L5758] RET, EXPR ldv_alloc_skb_12(size, 32U) [L5758] gl_skb = ldv_alloc_skb_12(size, 32U) [L5759] COND TRUE (unsigned long )gl_skb != (unsigned long )((struct sk_buff *)0) [L5760] __len = (size_t )size VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, usb_counter=0] [L5761] CALL, EXPR skb_put(gl_skb, size) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={-18446744073709551615:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6427] EXPR arg0->data [L6427] EXPR arg0->tail [L6427] unsigned char *ret_val = arg0->data + arg0->tail; [L6428] EXPR arg0->tail [L6428] arg0->tail += arg1 [L6429] return ret_val; VAL [\old(arg1)=null, \old(last_index)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={-18446744073709551615:0}, arg0={-18446744073709551615:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, ret_val={0:0}, set_impl={24:0}, usb_counter=0] [L5761] RET, EXPR skb_put(gl_skb, size) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_put(gl_skb, size)={0:0}, usb_counter=0] [L5761] tmp___2 = skb_put(gl_skb, size) [L5762-L5763] EXPR, FCALL memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5762-L5763] __ret = memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5764] FCALL usbnet_skb_return(dev, gl_skb) [L5767] packet = (struct gl_packet *)(& packet->packet_data) + (unsigned long )size [L5768] count = count - 1U VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5769] CALL skb_pull(skb, size + 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-7, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5769] RET skb_pull(skb, size + 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, size + 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5771] COND FALSE !(count > 1U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5775] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-9, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5775] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5776] EXPR skb->len VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb->len=0, tmp___2={0:0}, usb_counter=0] [L5776] COND FALSE !(skb->len > 1514U) [L5792] return (1); [L5792] return (1); [L5792] return (1); [L5792] return (1); VAL [\old(last_index)=0, \result=1, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551615:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L6058] RET genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, genelink_rx_fixup(genelink_info_group0, genelink_info_group1)=1, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6059] ldv_state_variable_2 = 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6062] COND FALSE !(ldv_state_variable_2 == 2) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, tmp___4=0, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6021] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L6022] CALL gl620a_driver_exit() [L5888] CALL ldv_usb_deregister_14(& gl620a_driver) [L6181] FCALL usb_deregister(arg) [L6182] ldv_state_variable_1 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg={23:0}, arg={23:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5888] RET ldv_usb_deregister_14(& gl620a_driver) [L6022] RET gl620a_driver_exit() [L6023] ldv_state_variable_0 = 2 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6112] CALL ldv_check_final_state() [L6392] int tmp___7 ; [L6394] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L6283] return (last_index == 0); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6394] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L6394] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6395] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp___7=0, usb_counter=0] [L6397] CALL ldv_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5639] reach_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 240 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 25.6s, OverallIterations: 10, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 18.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3123 SdHoareTripleChecker+Valid, 17.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2985 mSDsluCounter, 16490 SdHoareTripleChecker+Invalid, 16.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 13411 mSDsCounter, 1276 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5024 IncrementalHoareTripleChecker+Invalid, 6300 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1276 mSolverCounterUnsat, 3079 mSDtfsCounter, 5024 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 965 GetRequests, 851 SyntacticMatches, 2 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 214 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1962occurred in iteration=9, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 9 MinimizatonAttempts, 2749 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.0s SatisfiabilityAnalysisTime, 3.6s InterpolantComputationTime, 1792 NumberOfCodeBlocks, 1792 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1764 ConstructedInterpolants, 0 QuantifiedInterpolants, 3636 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4343 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 13 InterpolantComputations, 8 PerfectInterpolantSequences, 1180/1200 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-21 16:13:41,303 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 16:13:43,030 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 16:13:43,032 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 16:13:43,059 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 16:13:43,059 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 16:13:43,062 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 16:13:43,063 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 16:13:43,066 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 16:13:43,068 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 16:13:43,071 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 16:13:43,072 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 16:13:43,073 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 16:13:43,073 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 16:13:43,081 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 16:13:43,082 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 16:13:43,085 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 16:13:43,085 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 16:13:43,086 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 16:13:43,087 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 16:13:43,088 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 16:13:43,088 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 16:13:43,089 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 16:13:43,090 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 16:13:43,092 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 16:13:43,098 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 16:13:43,098 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 16:13:43,098 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 16:13:43,099 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 16:13:43,099 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 16:13:43,099 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 16:13:43,099 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 16:13:43,100 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 16:13:43,100 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 16:13:43,101 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 16:13:43,101 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 16:13:43,102 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 16:13:43,102 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 16:13:43,102 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 16:13:43,102 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 16:13:43,103 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 16:13:43,103 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 16:13:43,107 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-21 16:13:43,137 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 16:13:43,137 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 16:13:43,138 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 16:13:43,139 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 16:13:43,139 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 16:13:43,139 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 16:13:43,140 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 16:13:43,140 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 16:13:43,140 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 16:13:43,141 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 16:13:43,141 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 16:13:43,141 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 16:13:43,141 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 16:13:43,141 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 16:13:43,142 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-21 16:13:43,142 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-21 16:13:43,142 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-21 16:13:43,142 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 16:13:43,142 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 16:13:43,142 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 16:13:43,142 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 16:13:43,142 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 16:13:43,143 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 16:13:43,143 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 16:13:43,144 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 16:13:43,144 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-21 16:13:43,144 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b [2021-12-21 16:13:43,462 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 16:13:43,505 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 16:13:43,507 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 16:13:43,507 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 16:13:43,510 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 16:13:43,511 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2021-12-21 16:13:43,597 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/20171f3f0/ac180e99fce14263a79a6e4ba93183a7/FLAGc51169690 [2021-12-21 16:13:44,278 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 16:13:44,279 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2021-12-21 16:13:44,307 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/20171f3f0/ac180e99fce14263a79a6e4ba93183a7/FLAGc51169690 [2021-12-21 16:13:44,621 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/20171f3f0/ac180e99fce14263a79a6e4ba93183a7 [2021-12-21 16:13:44,632 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 16:13:44,633 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 16:13:44,634 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 16:13:44,634 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 16:13:44,645 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 16:13:44,646 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 04:13:44" (1/1) ... [2021-12-21 16:13:44,647 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7b7e980f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:44, skipping insertion in model container [2021-12-21 16:13:44,647 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 04:13:44" (1/1) ... [2021-12-21 16:13:44,652 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 16:13:44,746 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 16:13:45,297 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2021-12-21 16:13:45,482 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 16:13:45,509 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-21 16:13:45,551 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 16:13:45,650 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2021-12-21 16:13:45,689 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 16:13:45,706 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 16:13:45,804 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2021-12-21 16:13:45,861 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 16:13:45,895 INFO L208 MainTranslator]: Completed translation [2021-12-21 16:13:45,895 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45 WrapperNode [2021-12-21 16:13:45,895 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 16:13:45,896 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 16:13:45,896 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 16:13:45,897 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 16:13:45,901 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:45,939 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:45,997 INFO L137 Inliner]: procedures = 115, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 932 [2021-12-21 16:13:45,997 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 16:13:45,998 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 16:13:45,998 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 16:13:45,998 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 16:13:46,004 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,004 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,019 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,020 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,059 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,078 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,083 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,096 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 16:13:46,103 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 16:13:46,103 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 16:13:46,103 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 16:13:46,104 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 04:13:45" (1/1) ... [2021-12-21 16:13:46,109 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 16:13:46,117 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 16:13:46,145 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 16:13:46,176 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-21 16:13:46,199 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2021-12-21 16:13:46,199 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-21 16:13:46,199 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-21 16:13:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-21 16:13:46,200 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-12-21 16:13:46,200 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-21 16:13:46,200 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2021-12-21 16:13:46,200 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-21 16:13:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-21 16:13:46,200 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-21 16:13:46,201 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-21 16:13:46,201 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-21 16:13:46,201 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-21 16:13:46,201 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-21 16:13:46,201 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-21 16:13:46,201 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 16:13:46,201 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-21 16:13:46,201 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-21 16:13:46,201 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2021-12-21 16:13:46,202 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2021-12-21 16:13:46,202 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-21 16:13:46,202 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-21 16:13:46,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-21 16:13:46,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-21 16:13:46,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-21 16:13:46,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-21 16:13:46,203 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-12-21 16:13:46,204 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-12-21 16:13:46,204 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-21 16:13:46,204 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-21 16:13:46,205 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-21 16:13:46,205 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 16:13:46,205 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 16:13:46,474 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 16:13:46,475 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 16:13:46,648 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-21 16:13:51,835 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder has thrown an exception: java.lang.AssertionError: Not a regular bitvector operator with bitvector result: bvshl at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.BitvectorUtils$RegularBitvectorOperation_BitvectorResult.isCommutative(BitvectorUtils.java:505) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.BitvectorUtils$BitvectorOperation.notSimplified(BitvectorUtils.java:296) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.BitvectorUtils$BitvectorOperation.simplify_NonConstantCase(BitvectorUtils.java:291) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.BitvectorUtils$BitvectorOperation.simplifiedResult(BitvectorUtils.java:286) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.BitvectorUtils.termWithLocalSimplification(BitvectorUtils.java:217) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.SmtUtils.termWithLocalSimplification(SmtUtils.java:1490) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.boogie.Expression2Term.translateFunctionApplication(Expression2Term.java:405) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.boogie.Expression2Term.translate(Expression2Term.java:258) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.boogie.Expression2Term.translateFunctionApplication(Expression2Term.java:391) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.boogie.Expression2Term.translate(Expression2Term.java:258) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.boogie.Expression2Term.translateToTerm(Expression2Term.java:120) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.boogie.Statements2TransFormula.addAssignment(Statements2TransFormula.java:288) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.boogie.Statements2TransFormula.statementSequence(Statements2TransFormula.java:703) at de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.util.TransFormulaAdder.addTransitionFormulas(TransFormulaAdder.java:119) at de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildProcedureCfgFromImplementation(CfgBuilder.java:733) at de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.cfg.CfgBuilder.createIcfg(CfgBuilder.java:264) at de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBuilderObserver.process(RCFGBuilderObserver.java:88) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.DFSTreeWalker.runObserver(DFSTreeWalker.java:65) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:167) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2021-12-21 16:13:51,839 INFO L158 Benchmark]: Toolchain (without parser) took 7205.11ms. Allocated memory was 65.0MB in the beginning and 174.1MB in the end (delta: 109.1MB). Free memory was 43.3MB in the beginning and 111.7MB in the end (delta: -68.5MB). Peak memory consumption was 87.0MB. Max. memory is 16.1GB. [2021-12-21 16:13:51,839 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 46.1MB. Free memory was 28.9MB in the beginning and 28.9MB in the end (delta: 41.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 16:13:51,840 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1261.92ms. Allocated memory was 65.0MB in the beginning and 174.1MB in the end (delta: 109.1MB). Free memory was 42.9MB in the beginning and 115.5MB in the end (delta: -72.5MB). Peak memory consumption was 52.0MB. Max. memory is 16.1GB. [2021-12-21 16:13:51,840 INFO L158 Benchmark]: Boogie Procedure Inliner took 100.98ms. Allocated memory is still 174.1MB. Free memory was 115.5MB in the beginning and 109.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 16:13:51,840 INFO L158 Benchmark]: Boogie Preprocessor took 104.29ms. Allocated memory is still 174.1MB. Free memory was 109.2MB in the beginning and 101.6MB in the end (delta: 7.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-21 16:13:51,840 INFO L158 Benchmark]: RCFGBuilder took 5734.55ms. Allocated memory is still 174.1MB. Free memory was 101.6MB in the beginning and 111.7MB in the end (delta: -10.1MB). Peak memory consumption was 34.9MB. Max. memory is 16.1GB. [2021-12-21 16:13:51,842 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 46.1MB. Free memory was 28.9MB in the beginning and 28.9MB in the end (delta: 41.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1261.92ms. Allocated memory was 65.0MB in the beginning and 174.1MB in the end (delta: 109.1MB). Free memory was 42.9MB in the beginning and 115.5MB in the end (delta: -72.5MB). Peak memory consumption was 52.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 100.98ms. Allocated memory is still 174.1MB. Free memory was 115.5MB in the beginning and 109.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 104.29ms. Allocated memory is still 174.1MB. Free memory was 109.2MB in the beginning and 101.6MB in the end (delta: 7.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 5734.55ms. Allocated memory is still 174.1MB. Free memory was 101.6MB in the beginning and 111.7MB in the end (delta: -10.1MB). Peak memory consumption was 34.9MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder: - ExceptionOrErrorResult: AssertionError: Not a regular bitvector operator with bitvector result: bvshl de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder: AssertionError: Not a regular bitvector operator with bitvector result: bvshl: de.uni_freiburg.informatik.ultimate.lib.smtlibutils.BitvectorUtils$RegularBitvectorOperation_BitvectorResult.isCommutative(BitvectorUtils.java:505) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2021-12-21 16:13:51,877 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: AssertionError: Not a regular bitvector operator with bitvector result: bvshl